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SECTION 1 


SUMMARY 

The objective of this program was to develop refinements to the sensor failure 
detection, isolation and accommodation (DIA) algorithm developed under NASA 
Contract NAS3-22481, "Sensor Failure Detection System". Participants in the 
program were the Commercial Products Division of Pratt & Whitney Aircraft 
Group, and Systems Control Technology (SCT), Inc., with sponsorship provided 
by NASA Lewis Research Center. 

Refinements were developed for the simplified non-linear FIDO engine 
simulation, which is used as a model for the filter in the DIA algorithm, to 
improve the algorithm's transient accuracy over the flight envelope. A 
stand-alone non-proprietary version of the simplified non-linear simulation 
was also developed. 

Three potential revisions to the DIA algorithm were evaluated relative to 
their ability to minimize or eliminate the effect of estimation biases and to 
improve detection, isolation, and accommodation performance. The selected 
revision feeds back the estimator outputs to the linear regulator portion of 
the control all the time. In the case of no failures, the sensor outputs are 
fed to the integral control. When a sensor failure occurs, the estimate of the 
failed parameter is fed back to the integral portion. In the course of making 
the refinements, an underlying goal was to reduce the algorithm's complexity, 
where possible, for future implementation on NASA's microprocessor system. 

The resulting revised DIA algorithm was evaluated over the flight envelope on 
the non-linear FIDO dynamic simulation. The evaluation showed that the 
improved DIA algorithm eliminated the estimation error with no failures 
induced while improving the capability to detect, isolate, and accommodate 
sensor failures. 


SECTION 2 


INTRODUCTION 

The "Sensor Failure Detection System for Jet Engines" program, NASA Contract 
NAS3-23282, developed refinements to the sensor failure detection, isolation 
and accommodation (DIA) algorithm developed under NASA Contract NAS3-22481, 
"Sensor Failure Detection System" program. This included refinements to 
improve accuracy of the simplified non-linear engine model used in the filter 
for the DIA algorithm. The DIA algorithm itself was revised to eliminate the 
effect of filter biases on steady state operating point accuracy. 

This follow-on program was conducted by a team consisting of Pratt & Whitney 
Aircraft Commercial and Government Products Divisions and Systems Control 
Technology Inc., (SCT) of California, with Pratt & Whitney Aircraft Commercial 
Products Division (CPD) being the prime contractor. Figure 2-1 shows the team 
members' primary responsibilities for this program. The program consisted of 
three technical tasks; Task I - "Simplified Simulation Refinement" described 
in Section 3, Task II - "Detection, Isolation, and Accommodation Algorithm 
Improvement" described in Section 5, and Task III - "Non-Linear Simulation 
Evaluation" described in Section 6. 

Under the "Sensor Failure Detection System" Program ( NAS3-22481 ) , which was 
completed in August 1981 [1], the applicability of advanced detection, 
isolation, and accommodation concepts to sensor failure detection for gas 
turbine engine control systems was demonstrated. The configuration of the 
engine with the multivariable control and the fault detection logic is shown 
in Figure 2-2. Five advanced concepts were evaluated for detecting, isolating, 
and accommodating sensor failures. A screening process led to the selection of 
an advanced concept (summarized in Table 2-1) that uses a steady state Kalman 
filter to generate residuals for failure detection. The weighted sum squared 
residual (WSSR) technique was used to detect soft failures. Likelihood Ratio 
testing of a bank of steady state Kalman filters (each designed with one input 
missing) was used for isolation, and reconfiguring of the normal mode Kalman 
filter by eliminating the failed input was used to accommodate the failure. 

The detection, isolation, and accommodation (DIA) concept is shown in Figure 
2-3. This program utilized the FIDO engine simulation and FIDO Multivariable 
Control (MVC) logic developed under the FIDO Multivariable Control System 
program (Air Force contract F33615-75-C-2053) [2,3], as the test bed system 
for concept evaluation. 

The estimation filters employed in the detection, isolation, and accommodation 
concept required the implementation of a dynamic model of the engine. In the 
referenced program, simplified linear engine models were developed based upon 
sixteenth order linear models which were available from the FIDO Multivariable 
Control System program. A set of steady state Kalman filter gain matrices were 
designed based upon these linear models. Curve fits of the coefficients of the 
linear model matrices and filter gain matrices were then calculated to provide 
continuous operation of the model and filters throughout the flight envelope. 
The curve-fit set of linear models resulted in a simplified non-linear model. 
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TABLE 2-1 


ADVANCED CONCEPT FOR DETECTING, ISOLATING, AND ACCOMMODATING 

SENSOR FAILURES 


Detection 


Isolation 


Accommodation 


Innovations testing based on a Weighted Sum-Squared Residual 
(WSSR) technique for soft failures. Innovations testing 
against thresholds for hard failures. 

On-line isolation of hard failures using innovations 
testing; off-line isolation (Logic only activated after 
detection occurs) of soft failures using a Generalized 
Likelihood Ratio testing technique. A bank of Kalman filters 
is employed for off-line isolation. 

Reconfiguration and reinitialization of normal mode filter. 


The Final Report on NASA Contract NAS3-22481 [1] describes the results of the 
detailed evaluation of the detection, isolation and accommodation concept. 
While the performance of the advanced concept was generally good and its 
feasibility demonstrated, several problem areas were identified. These 
problems included steady state and dynamic mismatch of the simplified 
non-linear model; steady state estimate errors with no failures inauced; 
instabilities when accommodating failures; accommodation inaccuracies; and 
missed detections and false alarms. These problems were addressed in the 
follow-on program as noted below. 

Linear models of the FIDO engine were generated at 109 flight operating 
points. The specific flight operating points were selected to be sufficient to 
ensure that the linear models completely define engine operation throughout 
the flight envelope. Functional relationships between the linear model 
coefficients were developed to create a simplified non-linear simulation of 
the FlOO engine. This simplified simulation was validated by comparing its 
operation to that of the non-linear FlOO simulation. The simplified non-linear 
simulation was delivered to NASA-LeRC. A detailed discussion of the simplified 
simulation development is included in Section 3. 

Potential revisions to the DIA algorithm were developed to correct the 
algorithm deficiencies identified in the referenced contract. Three potential 
algorithm revisions were evaluated to arrive at a modified design which 
eliminates the steady state estimation errors with no failures induced 
(Section 5.1). The three revisions are summarized below: 

Revision 1 The sensor values are fed back to the control algorithm in the 
case of no failures. When a failure occurs, the appropriate 
estimator output will be substituted. 

Revision 2 The estimator outputs are fed back all the time to the linear 

regulator portion of the control mode. In the case of no failure, 
the sensor outputs are fed to the integral control, but in case of 
a failure the appropriate estimator output is fed back in place of 
the failed sensor. 
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Figure 2-3 Detection, Isolation, and Accommodation Concept 


Revision 3 The estimator outputs are fed back all of the time to both the 
proportional (LQR) and integral portions of the control. A 
supplementary trim logic (integrator) is implemented in the DIA 
algorithm to eliminate bias errors in estimator outputs. 

Revisions 1 and 2 were judged to be equal i n'complexity, whereas Revision 3 
was considered to be of much greater complexity because of the additional 
integrators and associated integral trim logic. All three DIA revisions were 
judged to be equal in their ability to eliminate the steady state hang-off 
errors for the no-failure case. The three DIA revisions also exhibited 
comparable detection, isolation and accommodation performance. However, 

Revision 2 generally exhibited less transient upset after a failure was 
induced, particularly for slow drifts. It was, therefore, decided to 
incorporate Revision 2 in the DIA algorithm for non-linear siniulation 
evaluation during Task III. The results of this evaluation are presented in 
Section 5.3. 

The DIA algorithm, modified with Revision 2, was further modified to incorpor- 
ate the new simplified non-linear simulation to improve the algorithm's 
dynamic accuracy. This revised algorithm was then evaluated at 15 flight 
operating points using the non-linear FIDO simulation. Comparisons to the 
baseline DIA algorithm (developed under Contract NAS3-22481) and parameter 
synthesis technique were made where data from similar flight and failure 
conditions existed from the previous contract. The revised algorithm was shown 
to eliminate the steady state hang off errors for the no-failure case and 
provide equal or better DIA capability to the algorithm developed in the 
referenced contract. The results of this comparison are presented in Section 5. 
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3,0 DEVELOPMENT OF IMPROVED SIMPLIFIED NON-LINEAR SIMULATION 

The filters employed in the detection, isolation, and accommodation (DIA) 
concept require the implementation of a dynamic model of the engine. The 
simplified model of the engine used for the DIA algorithm is shown in a block 
diagram on Figure 3-1 and is described by the following equations; 


Ub 


Xb 


Xb 


Yb 




Figure 3-1 Simplified Nonlinear Model Implementation 


X = F(X - Xss) 

( 1 ) 

Y = Yb + H(X - Xb) + D(U - Ub) 

( 2 ) 

where 


Xss = Xb - F-1 g(U - Ub) 

(3) 

In these equations, the state derivative, X, 

is being driven by the "distance 


the state, X, is from its steady state value, X 53 . The subscript, b, denotes 
a base point obtained from the original steady state operating line data. 
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This model looks much like a linear model. Note, however, that the model 
matrices (F, F“^G, H and D) are functions of the operating condition as are 
the base points (X 5 , Uh, and Y 5 ). For full flight envelope operation, 
the matrices used are formed by scheduling linear model matrices throughout 
the flight envelope. 

In the previous program, simplified fourth order linear models were developed 
using a limited number of sixteenth order linear models which were available 
from the FlOO Multivariable Control System program (Air Force Contract 
F33615-75-C-2053) . A set of Kalman filter gain matrices were designed based 
upon these fourth order linear models. Curve fits of the coefficients of the 
models and filters were then calculated to provide continuous operation of the 
models and filters throughout the flight envelope. The curve-fit set of linear 
models resulted in a simplified non-linear model. 

While performance of the combined filter/model algorithm was quite good at the 
lower altitude and Mach number flight conditions, some problems of steady 
state and transient mismatch were encountered at higher altitudes and Mach 
numbers. The transient mismatch was found to result from not having a 
sufficient number of the original linear models available to constrain the 
curve fitting procedure for the matrix elements at these flight conoitions to 
obtain a good accuracy of fit. The steady state mismatch resulted primarily 
from inaccuracies in the model base point schedules. Even though the Kalman 
filters worked well in minimizing these mismatches, the effectiveness of the 
detection, isolation, and accommodation algorithm was reduced at these flight 
conditions. Additional work was required to improve the transient accuracy of 
the model. This was the goal of Task I of this program. 

The Task I effort involved generation of a set of linear engine models for the 
FlOO engine, and development of a simplified non-linear simulation by 
developing functional relationships for model coefficients that span a-typical 
flight envelope. The systematic procedure used to achieve this is outlined in 
Figure 3-2. This procedure will be discussed in the following paragraphs. 

3.1 Selection of Flight Operating Points 

The first task in developing the simplified non-linear simulation was to 
define a set of flight operating points at which to generate linear models of 
the FlOO engine using the non-linear deck. The ground rule used to select the 
flight operating points was to determine which points are required to 
adequately span a typical flight envelope such that any functional relation- 
ships for simulation parameters are accurate for operation throughout the 
flight envelope. 
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TASK I - SIMPLtFIED SIMULATION REFINEMENT 



Figure 3-2 Simplified Simulation Refinement Procedure 


In the previous program (NASA-22481) the flight point data was obtained from 
the Air Force document AFAPL-TR-76-74, "FlOO Multivariable Control System - 
Engine Models/Design Criteria," dated November 1976 [4]. Sixteenth order 
linear models at these points were available from the FIOO/MVCS program. These 
were reduced to fourth order models and used in the simplified FlOO 
simulation. The flight operating points are plotted on Altitude/Mach number 
and PT2/TT2 (engine inlet pressure and temperature) diagrams shown in Figures 
3-3 and 3-4. Figure 3-3 shows that the data points span the flight envelope 
adequately. However, when evaluating the data points relative to the PT2/TT2 
relationship on Figure 3-4, a high concentration of points are evident at the 
lower PT2/TT2 conditions. The distribution over the remaining flight envelope 
is inadequate. The high concentration of models on the PT2/TT2 diagram 
coincide with the flight conditions where the performance of the original 
simplified non-linear model was acceptable. 
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Figure 3-4 FlOO Flight Envelope With Old Data Points 


TABLE 3-7 



Altitude (ft) 

Mach No. 


PLA (deg) 



0.0 

0.0 

24., 

36., 52., 

67., 

83 

0.0 

1.2 

60., 

70., 83. 



70000.0 

0.3 

20., 

56., 83. 



70000.0 

0.75 

2U. , 

CO 

67., 

83 

15000.0 

1.25 

60., 

74., 83. 



15000.0 

1.6 

74., 

83. 



20000.0 

0.75 

20., 

36., 52., 

67., 

83 

20000.0 

1.5 

74., 

83. 



20000.0 

1.9 

74., 

83. 



25000.0 

1.75 

74., 

83. 



28000.0 

1.25 

60., 

74., 83. 



30000.0 

0.6 

24., 

36. , 67. , 

83. 


30000.0 

2.0 

74., 

83. 



32000.0 

2.2 

74., 

83. 



35000.0 

0.8 

20., 

36., 52., 

67., 

83 

35000.0 

1.6 

74., 

83. 



35000.0 

2.2 

74., 

83. 



35000.0 

2.5 

74., 

83. 



41000.0 

2.20 

74.0 




41000.0 

2.0 

83.0 




41000.0 

2.3 

74., 

83. 



42500.0 

1.8 

74., 

83. 



42500.0 

2.2 

74., 

83. 



45000.0 

0.9 

24., 

40. , 52. , 

67., 

83 

45000.0 

2.5 

74., 

83. 



49000.0 

2.3 

74., 

83. 



50000.0 

1.3 

74., 

83. 



50000.0 

1.8 

74., 

83. 



50000.0 

2.3 

74., 

83. 



52500.0 

0.65 

20., 

36., 5^., 

67., 

83 

55000.0 

2.1 

74., 

83. 



56000.0 

2.0 

74., 

83. 



59000.0 

2.0 

74., 

83. 



65000.0 

1.2 

60., 

74., 83. 



65000.0 

1.8 

74., 

83. 



65000.0 

2.5 

74.. 

83. 



70000.0 

0.85 

20., 

36. , 52. , 

67., 

83 

70000.0 

2.1 

74.. 

83. 



75000.0 

1.2 

60., 

74., 83. 



75000.0 

2.3 

74.. 

83. 



75000.0 

2.5 

74., 

83. 
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The relative location of the flight points on the PT2/TT2 envelope was felt to 
be a definite consideration in the selection process. Therefore flight 
operating points were selected which span both the altitude/Mach number and 
PT2/TT2 flight envelopes. A total of 109 points were selected as tabulated on 
Table 3-1 and illustrated on Figures 3-5 and 3-6 relative to the Altitude/Mach 
number and PT2/TT2 diagrams, respectively. 

3.2 Generation of Linear Models 

Fourth order linear models of the FlOO engine were generated at the 109 
selected flight operating points using the non-linear FlOO simulation. The 
linear models generated are composed of a set of matrices (F, F"'G, G, H and 
D) generated at each flight point and are defined in the following state space 
equations: 


6X 

= F 5 X 

+ G 6 U 

(4) 

5Y 

= H 5 X 

+ D5 U 

(5) 


where X is a 4 x 1 state vector, U is a 5 x 1 input vector, and Y is a 7 x 1 
output vector. These vectors are defined in Table 3-2. 



Figure 3-5 Selected Data Points on Alt/M Flight Envelope 
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Figure 3-6 Selected Data Points on PT 2 /TT 2 Flight Envelope 


1 . 

Xl = 
X2 = 
X3 = 

X4 = 


Yl = 

Y3 - 
Y4 = 
Y5 = 
Y6 = 
Y? = 


TABLE 3-2 

ENGINE VARIABLES USED IN REDUCED ORDER MODELS 


Engine State Variables 


2 . Engine Inputs 


Fan Speed, SNFAN (N7) - rpm U] 

Compressor Speed, SNCOM U2 

(N2) - rpm 

Burner Exit Slov; Response U3 

Temperature, T+4]o - °R 
Fan Turbine Inlet Slow Response U4 
Temperature, Tt4.5io - °R 

U5 


Engine Outputs 

Fan Speed, SNFAN (N]) - rpm 
Compressor Speed, SNCOM (N2) - rpm 
Burner Pressure, PT 4 - psia 
Augmentor Pressure, PT6 - psia 
Fan Turbine Inlet Temperature, FTIT - 
Engine Thrust, FNMX - lb 
Compressor Surge Margin, ShWC % 


= Main Burner Fuel Flow, WFMB - 
Ib/hr 

= Nozzle Jet Area, Aj - ft^ 

= Compressor Inlet Variable 

Vane, CIVV-deg 

= Rear Compressor Variable Vane, 
RCVV-deg 

= Compressor Bleed Flow, BLC - % 


The model matrices were generated by two different methods at the selected 
flight operating points. These two methods calculate the matrices as follows. 

(i) Method 1 : In this method, matrices F and H are generated using an 

"offset derivative technique" wherein biases are introduced to each element of 
the state vector (x) at a steady state point. The resulting steady state 
changes in the output (y) and state derivative (x) are observed and are used 
to determine F and H directly, as shown below, without exercising the 
simulation transiently. Figure 3-7 shows a block diagram of this technique. 


F 


ij 


6^i 



( 6 ) 


H., = 5^i (7) 

~W. 

3 

where bx . is the perturbation in the jth element of the x vector. 

J 

The F“^G matrix is generated by introducing biases in the control vector and 
converging the simulation to steady state; i.e., x equal to 0.0. For this 
situation equation (5) can be written as 



Figure 3-7 Linear Model Generation by the Offset Derivative Technique 
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( 8 ) 


6X = o=F5x + Gb 

where bu^ is the perturbation in the jth element of the u vector. 

Similarly 5 Y = H 6X + Db^^ 

= H(-F"''G)b^j + Db^^ 

= (D - HF’^G) b^ 

(D - HF’^G). . = r^Sy,- (9) 

u . 

J 

Using the F, H and F“^G matrices, the G and D matrices can be computed as 
follows: 


G = -(F) (-F-^G) (10) 

D = (D - H F-‘'g) - (H) (-F-^G) (11) 

(ii) Method 2 : In this method the G and D matrices are also generated 

directly using the "offset derivative technique" with biases introduced to 
each element of the control vector (u) at a steady state point. The F"^G 
matrix is computed from F and G. In addition to equations (6) and (7), the 
following equations apply for this method. 


G 

D 


8^i 

(12) 

ij BJT 

(13) 


After evaluating the two methods, it was decided to use the matrices generated 
directly; i.e., F, G, H, and D from method 2 and F"'G from method 1. 
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3.3 Transient Performance of the Linear Models 

The transient performance of several linear models was compared for a step 
input in PLA against the detailed nonlinear FIDO simulation. Figures 3-8 to 
3-10 show the transient responses of fan speed (Nl), compressor speed (N2), 
burner pressure (PT4) and augmentor pressure (PT6) at the following flight 
points. 

(i) alt = 0 ft., Mach No = 0.0, PLA = 52.0 degrees to 52.5 degrees (step) 

(ii) alt = 0 ft., Mach No = 0.0, PLA = 52.0 to 57.0 degrees (step) 

(iii) alt = 30000, ft, Mach No. = 0.6, PLA = 24.0 degrees to 24.5 degrees 

(step ) 

The linear models were perturbed with the control variable transients 
generated by the nonlinear simulation of the FlOO engine and multivariable 
control system. Small perturbation transient characteristics of the linear 
models are in good agreement with the nonlinear simulation. Differences in the 
steady state base points result from differences in steady state reference 
schedules between the Multivariable Control System simulation and the FlOO 
simulation used to generate the linear models. 

3.4 Simplification of Linear Model Matrices 

In order to implement a simplified nonlinear model based upon the 
individual linear models, polynomial curve fits of each model matrix element 
were developed. Prior to developing these curve fits, the matrix data was 
analyzed to determine what simplifications could be implemented which would 
result in the simplest polynomial curve fits. This simplification was 
accomplished in two ways. First matrix data was analyzed to determine which 
elements were insignificant and could either be zeroed or set to a constant 
value. Second, correction factors such as d [(inlet total temperature)/ 
(standard day temperature)], and 6 [(inlet total pressure)/( 14.7) ] were 
applied to matrix elements and potential bias variables to reduce data scatter. 

In order to determine which matrix elements were insignificant; i.e., 
their contribution to system static and dynamic performance is negligible, the 
matrices were first nondimensionalized. This was accomplished by dividing each 
incremental quantity by its corresponding base point value. For example, the 
H 23 element of the H matrix was nondimensionalized as follows. 

^23 nondimensional ~ ^23 * ^b3^^b2 

The nondimensionalized set of matrices represent sensitivities in percent 
and are independent of the magnitude and range of values over which states x, 
inputs u and outputs y vary. By applying a simple threshold check on 
respective elements of all matrices, relatively small magnitude elements were 
identified. For example the F24 and F34 elements of the F matrix were found to 
be on the order of 10“^ to 10"^ (except at very few flight points) whereas 
other elements were generally in the range of lO'*’* to 10" . Therefore F24 
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Figure 3-9 Small Perturbation Transient Response of the Linear Model at 
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and F34 were identified as small and could either be made zero or replaced by 
the mean of all 109 points. The matrix elements identified to be small are: 

F24, F34, 

H73, H54, H74 

D44, D64 

The above mentioned matrix elements were made constant in the development 
of the simplified engine model. 

A sensitivity analysis of the eigensystem to the elements of the F matrix 
was also performed. The elements F13, F43, F24 and F34 had negligible effect 
on the eigensystem. Thus, implementation of these matrix elements as constants 
will have no adverse effect on the system transient behavior. 

Application of temperature and pressure correction factors to matrix 
elements and potential bias parameters for curve fits was accomplished with a 
computer program which operated on the data and provided plots for visual 
inspection. It was observed from the point plots of the model data, that 
application of the correction factors tends to reduce the spread (scatter) of 
the matrix elements with changing flight condition. Figures 3-11 and 3-12 
present examples of matrix element point plots with no correction factors and 
with the correction factors respectively. The "corrected" data gives improved 
functional relationships and was used in the development of the polynomial 
curve fits discussed in Section 3.5. 

3.5 CURVE-FITTING OF MODEL MATRIX ELEMENTS 

Polynomial schedules of the model matrices F, F"^G, H and D were 
developed for use in the full envelope simplified nonlinear model of the FIOC 
engine. The point plots of the linear model data, with correction factors 
applied, were studied for selection of the variables with which the matrix 
elements show a functional relationship. A polynomial function was generated 
for each matrix element of the F, F~‘ G, H and D matrices using a leaps and 
bounds subset regression technique [5], This regression analysis resulted in 
the polynomial curve fits for the matrix elements shown in Tables 3-3a through 
3-3d. 

3.G ERROR ANALYSIS OF MODEL MATRIX CURVE FITS 

The error analysis approach taken was to plot the matrix eletiients 
computed from the full envelope model against the actual value of the 
corresponding matrix element. Data with correction factors applied (both real 
data and matrix data) was used for this error analysis. For a perfect ^ 
regression model the model points would lie on a line of 45° slope (y = y) . If 
the regression model is not perfect these model points will be distributed 
around the 45° slope line. A measure of the goodness of the fit can be 
obtained using the sample correlation coefficient R, and standard deviation of 
the model errors. Figures 3-13a through 3-13f present plots of Fll, F21, F12, 
F22, F33, and F44 matrix elements with a 45° slope line and 1 and 2crbands 
around it. It is clear from Figures 3-13a through 3-13f that most model points 
lie within a 1 a band of the regression model and most certainly within 2 ct. 
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TABLE 3-3a 

FULL ENVELOPE MODEL OF F MATRIX 


F( 1, 1 ) 
Fi2. 1 ) 
F(3. 1 ) 
F(4, 1 ) 
F( 1> 2) 
F<2, 2) 
F(3. 2) 
F(4, 2) 
F( 1, 3) 
F(2. 3) 
F(3, 3) 
F<4, 3) 
F( 1, 4) 
F(2> 4) 
F(3, 4) 
F(4, 4) 


-0 9683E-1/DL1-0 lSa6E-2*XPT6«-«2-2 463 
-0 1820E-3*XNl+0 2768E-9*-XPT6^!-XNl **2+0 7721 
-O 2201E-2*XPT6+0 8295E-4*XTT45-0 S207E-1 
O 6353E-2/DL1+0. 1038E-8*XPT4**3-0 2724E-1 
-0. 2596E+l*THl+0. 81 59E-1 /DL 1+5 78 
-0 2381E+1 /THl-0 2348E-7*XN1**2+1 54<5 
-O 4095E-2*DLl-0 8174E-2/DL1+0 1212E-1 
-0 1010E-l*DLl-0 2312E-1/DL1+0 2996E--1 
-1 597 

-0. 1569/DLl+O 23S2E-l*XPT4+4 2890 
-0 6377 /DlI+O 5218/THl-O 5229 
-0 1156 

-0 1143/DLl+O 8349E-7*XN1**2+1 074 
0 6013E-1 
0. 2632E-2 

-0 1914E+1 /DLl+0 1564E+1/TH1-1 568 


TABLE 3-3b , 

FULL ENVELOPE MODEL OF F-'G MATRIX 


FIG< 1, 1 ) 
FIG<2, 1 ) 
FIG<3, 1 ) 
FIG(4, 1 ) 
FIGU, 2) 
FIG(2, 2) 
FIG(3, 2) 
FIG<4, 2) 
FIG( 1, 3) 
FIG(2, 3) 
FIG<3, 3) 
FIG(4, 5) 
FIG< 1, 4) 
FIG(2, 4) 
FIG<3, 4) 
FIG\4, 4) 
FIG( 1, 5) 
FIG(2, 5) 
FIG-3, 5; 
FIG(4, 5) 


0. 9327E-3*XNl-0. 3145E-1 l*XNl**3-6 56 
-0 3616*THl-0. 3B50E+8/XNl**2+0 4541 
0. llS3E-3*XPT4-0 363E-9«XPT4**3-0 372E-1 
0. 9333E-3*XPT6-0 9744E-9+XN1 *XPT6**2-0 306E-1 
-0. 2971E+2*XPT6+0 2182E+2/ (.THKDL 1 > -260 4 
0 1121*XNl-0 1545E-2*>:PT4*XPT6**2-721 S 
0 5845E-1*XPT4-0 7198E-4*XPT4*XPT6**2-1 56S 
0 3761*XPT6-0 5675E-4*XPT4*XPT6**2-1 418 
0 1627*XPT4-0 4133E-4*XPT4*XPT6**2-2 10-a 
0 275*XPT6-6. 304 
0 1306E-l*XPT6-0 2379 
0 1068E-1«XPT6-0 1881 
0 S670E+1/TH1+0 5090E-l*XPT4-26 19 
0 1 168E+3*THl+0 1092E+3/TH1 -220 7 
0 2010*THl-0. 1262E-2*XPT4+0 2459 
O 93S6E-l*THl-0 1 1 57E-2*XPT4+0 2951 
O 5357E+4 /<Dl1*RTHi >-75 
0 3754E+4/ <DL1*RTH1)+157 9 
-0 9392E+2*(RTH1 /DLD-O 7399E+1 <■ ( THl /Di_l **2 ; +B 5 
-0 8524E+2*(RTH1 /DLl )-0 5902E+1 + ( THl /DL 1 **2 +9 7 
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TABLE 3-3c 

FULL ENVELOPE MODEL OF H MATRIX 


H< 1. 1 > 
H<2. 1) 
HO. 1) 
H(4. 1 > 
H(S. 1> 
H<&. 1> 
H(7. 1 ) 
H(1.2> 
H(2.2> 
HO. 2> 
H(4. 2> 
H(S. 2) 
H(6. 2> 
H<7. 2> 
H( 1. 3) 
H(2.3> 
H(3. 3) 
H<4. 3) 
H(S. 3) 
H(&. 3) 
H<7.3) 
H(l. 4) 
H(2. 4) 
H<3. 4) 
H(4. 4) 
H<S. 4) 
H(6.4> 
H(7. 4) 


1 

0 

-O 2B14E+1/XPT4-0 237BE-5*XP74*XPT6*0 4341E-1 
-O 53IB/XPT4-0 4950E-10»XNJ*»2+0 9&56E-2 
0 B714E-3»XPT4*0 17B^>E*2/XPT4-0 30i7 
O 91B4/TH1-0 3491E*4/XPT4«*2*0 151B 

0 3119E-2/XPT6-0 297BE-1 /XPT^.*«2-0 7266E-4 
0 

1 

O 291SE-1/TH1+0 4A44E-3»XPT6-0 1233E-1 
-0 90a0E-7»XNl-O A&64E-1/XPT4+0. 1152E-2 
-0. O27E-3«XTT45-0 1907E*4/XNl*O 4014 
0 32B7E-1 

0 2B99E-3/DL1+0 <.102/XPT4»«2+0 5523E-4 

O 

0 

-O 7570E-7*XPTA»«3-0 4BA7E-3 
-O. 3204E-6»XN2-»0 2399E-2 
0 3111E-1*TH1*0 54B&E-4»XTT45-0. 3612 
O. 1445E-1/DL1-0 1271E-3*XN1*0 3156 
-O 1322E-S 
0 
0 

-O 19B0E-3«XPT6*O 3175E-2 
-0 4300E-5«XPT4-0 5102E-4 
0 a4B6E-2 

0 1140E-1/DL1-0 1300E-3»XN1*0. 5192 
-0 1324E-5 


TABLE 3 -3d 

FULL ENVELOPE MODEL OF D MATRIX 


0(1.11 “ 0 

0 ( 2 . 1 1 • 0 

00.11 » -0 4135E-14*XNl*»3+0 19B3E-5»XPT6«*2»0 9972E-2 

0(4.11 - -0 9442E-7«XNl-0 2207E»5/XNl««2-0 2096E-2 

0(5.11 - -0 3541E-1»TH1*0 3135E+2/XPT4*0 4914E-1 

0(6.11 • -0 6850E*4/XNl*0 1326E*9/XN2«»2*0 3505 

0(7. 11 - -0 B329E-2/XPT4+0. 1035E-4 

0 ( 1.21 - 0 

0(2.2) • O 

0(3.21 - -O. 7192E-3»XPT6*»3*1. 255 

0(4.21 " -0 4047*XPT6*2. 908 

0(5. 21 - 0 265BE-2*XPT6**3-7 119 

0(6.2) - -O 2704E+4/THl*0 B536E+7/XN1+131 6 

0(7.2) - -O 3962E-6*XPT6**340 2B29E-3 

D( 1.3) ° 0 

0(2.3) - O 

0(3.3) - 0 5358E-2*XPT4-0 1670E-5»XPT4»XPT6**2-0 4101 

0(4.3) - 0 8815E-3*XPT4-0 2B36E-6*XPT4**3-0 6458E-1 

0(5.3) - 0. lll0E-6»XPT4««3-0. 17B9E-5»XN1*XPT4*0 5499 

0(6.3) - 0 1347E+1»XPT6-12 67 

0(7. 3) •> 0 2049E-3 

0( 1. 4) - O. 

0(2. 4) ° O 

0(3. 4) = 0 7838*THl-0 4666 

0(4.4) - -0 3630E-2 

0(5.4) = -0 2147E*1*TH1*0 2716E-7*XN1*«2-1 36 

0(6.4) - 1 073 

0(7.4) - 0 5327E-2«THl-0 B454E-2 

0 ( 1 . 5 ) - 0 

0 ( 2 . 5 ) - 0 . 

0(3.5) - -0. 316SE'(-3/0l.l-O. 1685E4’1«XPT4'»425. 9 
0(4.5) " -0 1446E+2»(RTH1/DL1 )-0 9368E-l»XPT4+24 09 
0(5.5) - 0 1183E«4/DL1-631 2 

0(6.5) - -0 74B2E4-4/DL14-1454 O 
0(7.5) » 0 9856/DLl*0. 3580E-1 
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The To and 2o bands were computed as follows. Let oy, andoy/x be the 
standard deviations of the data and the regression errors (regression of y on 
x) respectively. These are defined as: 


o 


2 

y 



(y, - y)^ 

n^ 


(15) 


a 



/ ^ \2 
- y^.) 


n-2 


(16) 


where y^- is the data being fitted, y is the mean of all the data records and 
y-j is the data obtained from the regression model. 

The sample correlation coefficient R is a measure of the goodness of the fit 
and is defined as 


R 


2 


2^- (y,- - y)^ 

(y^ - y)^’ 


0< R< 1 


(17) 


For a perfect model, R = 1. Conversely, R^ = 0 represents a poor fit. 
The three quantities, R, Oy, and <Ty/x> are related by the equation 


2 

‘'y/x 


n-1 

n-2 


(1 - 


R^) 


(18) 


For the linear engine model case n = 109, and ay and R are obtained from the 
regression program used to generate regression models. The above equation can 
then be written as 


ay/x = 1.0094y(l-R^) ay (19) 

The la and 2a bands on Figures 3-13a through 3-13f were computed using the 
above equations. 

Tables 3-4a through 3-4d tabulate the quantities R^, R,ayando / as 
part of the error analysis. ^ ^ 
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TABLE 3-4a 

ERROR ANALYSIS OF F MATRIX ELEMENTS 


Matrix 

Element 

r2 

R 

Mean 

Oy 

®y/x 

ay/x 

Oy 

Fll 

0.745 

0.863 

-0.350 

1.515 

0.769 

0.507 

F21 

0.402 

0.634 

-0.1681 

0.3022 

0.235 

0.777 

F31 

0.440 

0.663 

0.1749E-2 

0.1878E-1 

0.1412E-1 

0.752 

F41 

0.491 

0.701 

0.7128E-2 

0.4945E-1 

0.3545E-1 

0.717 

FI2 

0.637 

0.798 

2.909 

1.162 

0.703 

0.605 

F22 

0.788 

0.888 

-0.2408 

0.9844 

0.455 

0.463 

F32 

0.961 

0.9803 

-0.144E-1 

0.2751E-1 

0.006 

0.198 

F42 

0.966 

0.983 

-0.4348E-1 

0.7828E-1 

0.015 

0.185 

F13 

0.000 

0.000 

-1.597 

0.4334 

0.4375 

1.000 

F23 

0.952 

0.976 

9.220 

1.861 

0.410 

0.220 

F33 

0.997 

0.9985 

-1.788 

2.203 

0.121 

0.055 

F43 

0.000 

0.000 

-0.1156 

0.1339 

0.1352 

1.000 

F14 

0.948 

0.974 

7.309 

1.660 

0.380 

0.229 

F24 

0.000 

0.000 

0.6013E-1 

0.9085E-1 

0.9127E-1 

1.000 

F34 

0.000 

0.000 

0.2632E-2 

0.5578E-2 

0.5604E-1 

1.000 

F44 

0.997 

0.9985 

-5.366 

6.611 

0.364 

0.055 
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TABLE 3 -4b 

ERROR ANALYSIS OF F‘''6 MATRIX ELENENTS 


Matrix 

Element 

r2 

R 

Mean 


‘^y/x 

ay/x 

®y 

F'^GIl 

0.824 

0.908 

-0.6348 

0.4701 

0.198 

0.422 

F'^G2I 

0.838 

0.915 

-0.5248 

0.3345 

0.135 

0.404 

F"^G3I 

0.8404 

0.917 

-0.1661E-1 

0.5268E-2 

0.2114E-2 

0.401 

F'^G4I 

0.596 

0.772 

-0.1272E-1 

0.4172E-2 

0.2664E-2 

0.639 

F'^GI2 

0.741 

0.861 

-1022.0 

284.4 

145.4 

0.511 

F'^G22 

0.923 

0.961 

-113.6 

262.1 

73.07 

0.279 

F‘^G32 

0.967 

0.983 

-5.828 

12.06 

2.201 

0.183 

F”^G42 

0.967 

0.983 

-4.708 

9.788 

1.786 

0.183 

F"^GI3 

0.675 

0.822 

24.49 

6.801 

3.895 

0.573 

F"^G23 

0.438 

0.662 

1.321 

4.008 

3.019 

0.753 

F‘^G33 

0.634 

0.796 

0.1243 

0.1583 

0.096 

0.608 

F"^G43 

0.649 

0.806 

0.1081 

0.1280 

0.076 

0.595 

F’^GI4 

0.824 

0.908 

-7.034 

6.369 

2.685 

0.422 

F’^G24 

0.470 

0.686 

15.50 

17.33 

12.68 

0.731 

F'^G34 

0.748 

0.865 

0.2018 

0.1788 

0.090 

0.504 

F"^G44 

0.794 

0.891 

0.1468 

0.1347 

0.061 

0.456 

F'^GIS 

0.971 

0.985 

0.1472E+5 

0.2068E-5 

0.3538E+4 

0.171 

F’^G25 

0.956 

0.978 

0.105E+5 

0.1460E+5 

0.3076E+4 

0.211 

F’^G35 

0.992 

0.996 

-378.3 

624.2 

56.09 

0.0898 

F’^G45 

0.992 

0.996 

-326.6 

531.9 

47.79 

0.0898 
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TABLE 3-4c 


OP i 


ERROR ANALYSIS OF H MATRIX ELEMENTS 


Matrix 

Element 

r2 

R 

Mean 


‘^y/x 

oy/x 

ay 

HIT 

1. 

1. 

1. 

0. 

0. 

- - 

H21 

]. 

1. 

0. 

0. 

0. 

— 

H3I 

0.742 

0.861 

0.1184E-1 

0.8429E-2 

0.4302E-2 

0.510 

H41 

0.393 

0.627 

0.279E-2 

0.6902E-3 

0.5403E-3 

0.783 

H5I 

0.833 

0.913 

-0.1687E-1 

0.4572E-1 

0.1877E-1 

0.410 

H6I 

0.537 

0.733 

0.8526 

0.3497 

0.2391 

0.684 

H71 

0.406 

0.637 

-0.1132E-5 

0.1468E-4 

0. 

0.774 

HI2 

1. 

1. 

0. 

0. 

0. 

— 

H22 

1. 

1. 

1. 

0. 

0. 


H32 

0.788 

0.888 

0.2647E-1 

0.1112E-1 

0.5144E-2 

0.463 

H42 

0.434 

0.659 

-0.5460E-1 

0.3873E-1 

0.1906E-1 

0.492 

H62 

0. 

0. 

0.3287E-1 

0.5839E-1 

0.5866E-1 

1.005 

H72 

0.394 

0.628 

0.8334E-4 

0.3207E-4 

0.2508E-4 

0.782 

H13 

I. 

1. 

0. 

0. 

0. 


H23 

I. 

1. 

0. 

0. 

0. 

-- 

H33 

0.671 

0.819 

-0.2707E-2 

0.2531E-2 

0.1459E-2 

0.576 

H43 

0.790 

0.889 

-0.1297E-2 

0.3850E-3 

0.1773E-3 

0.460 

H5 3 

0.721 

0.849 

-0.2283 

0.1876E-1 

0.9956E-2 

0.531 

H63 

0.906 

0.952 

-0.7582 

0.1551 

0.4778E-1 

0.308 

H73 

0. 

0. 

-0.1322E-5 

0.2469E-5 

0.2481E-5 

1.005 

H14 

1. 

1. 

0. 

0. 

0. 

-- 

H24 

1. 

1. 

0. 

0. 

0. 

-- 

H34 

0.527 

0.726 

-02315E-2 

0.2632E-2 

0.1819E-2 

0.691 

H44 

0.616 

0.785 

-0.1018E-2 

0.4717E-3 

0.2937E-3 

0.623 

H54 

0. 

0. 

0.8486E-2 

0.1296E-1 

0.1303E-1 

1.005 

H64 

0.928 

0.963 

-0.5890 

0.1595 

0.4300 

0.269 

H74 

0. 

0. 

-0.1324E-5 

0.2900E-5 

0.2914E-5 

1.005 
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TABLE 3-4d 

ERROR ANALYSIS OF D MATRIX ELEMENTS 


Matrix oy/x 


Element 

R^ 

R 

Mean 


‘'y/x 

Oy 

Dll 

1. 

1. 

0. 

0. 

0. 


D21 

1. 

1. 

0. 

0. 

0. 

— 

D31 

0.515 

0.718 

0.8729E-2 

0.6035E-3 

0.422E-3 

0.699 

D41 

0.635 

0.797 

0.9528E-3 

0.9359E-4 

0.5681E-4 

0.607 

D51 

0.993 

0.997 

0.1718 

0.6941E-1 

0.5834E-2 

0.084 

D61 

0.822 

0.907 

0.5703 

0.9800E-1 

0.4154E-1 

0.424 

D71 

0.992 

0.996 

-0.3345E-4 

0.1978E-4 

0.1777E-5 

0.089 

D12 

1. 

1. 

0. 

0. 

0. 

-- 

D22 

1. 

1. 

0. 

0. 

0. 


D32 

0.960 

0.980 

-19.84 

20.11 

4.041 

0.201 

D42 

0.966 

0.983 

-8.314 

3.973 

0.736 

0.185 

D52 

0.9696 

0.985 

70.84 

73.95 

12.95 

0.175 

D62 

0.762 

0.873 

-1270 

740.6 

362.99 

0.49 

D72 

0.835 

0.914 

-0.1134E-1 

0.1188E-1 

0.4848E-2 

0.408 

D13 

1. 

1. 

0. 

0. 

0. 

-- 

D23 

1. 

1. 

0. 

0. 

0. 

— 

D33 

0.785 

0.886 

0.3909 

0.1623 

0.7561E-1 

0.466 

D43 

0.907 

0.952 

0.8678E-1 

0.3607E-1 

0.1105E-1 

0.306 

D53 

0.751 

0.867 

-1.327 

0.5617 

0.2816 

0.501 

D63 

0.747 

0.864 

24.69 

15.04 

7.601 

0.505 

D73 

0. 

0. 

0.2049E-3 

0.1285E-3 

0.1291E-3 

1.005 

D14 

1. 

1. 

0. 

0. 

0. 

-- 

D24 

1. 

1. 

0. 

0. 

0. 


D34 

0.583 

0.764 

0.4670 

0.2928 

0.1899 

0.649 

D44 

0. 

0. 

-0.3630E-2 

0.4006E-2 

0.4026E-2 

1.005 

054 

0.791 

0.889 

-1.788 

1.183 

0.5433 

0.459 

D64 

0. 

0. 

1.073 

21.74 

21.85 

1.005 
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TABLE 3-4d (Cont'd) 


OF F'COk 


Matrix 

Elanent 

r2 

R 

Mean 

Oy 

‘^y/x 

oy/x 

Oy 

D74 

0.522 

0.722 

-0.2108E-2 

0.2104E-2 

0.1462E-2 

0.695 

D15 

1. 

1. 

0. 

0. 

0. 

- 

D25 

1. 

1. 

0. 

0. 

0. 

- 

D35 

0.990 

0.995 

-811.1 

1212. 

121.16 

0.099 

D45 

0.983 

0.9915 

-35.86 

52.92 

6.932 

0.131 

D55 

0.985 

0.9925 

2577. 

4226. 

520.0 

0.123 

D65 

0.982 

0.9910 

-0.1883E+5 

0.2676E+5 

0.3607E+4 

0.135 

D75 

0.995 

0.9975 

2.708 

3.503 

0.2489 

0.071 



3.7 VALIDATION OF THE SIMPLIFIED NONLINEAR MODEL 

The full envelope simplified nonlinear model was validated by comparing 
its open loop transient response with the detailed FIOO/MVCS (Multivariable 
Control System) simulation as shown in Figure 3-14. The simplified model was 
driven by the control variables from the detailed FIOO/MVCS simulation. Base 
point information needed in the simplified model was derived by using fan 
speed from the model itself. The fan speed is used to compute a virtual power 
code which in turn (along with TT2 and Mach No.) is used to look up reference 
points (base points), as shown in Figure 3-15. 

Figures 3-16 through 3-20 present transient plots of low rotor speed 
(Nl), high rotor speed (N2), burner pressure (PT4), augnientor pressure (PT6), 
and Fan turbine inlet temperature (FTIT or TT45) at the flight points 
indicated on the figures. In general, the transient response of the simplified 
nonlinear model matched the detailed nonlinear FIOO/MVCS simulation quite 
well. The oscillations in Figures 3-18 and 3-19 originate within the detailed 
FIOO/MVC simulation. At some flight conditions, the steady state match was in 
error due to inaccuracies in the base point schedules which were taken 
directly from the MVCS logic. 
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DETAILED NONLINEAR FIOO/MCVS SIMULATION 



Figure 3-14 Comparison of Simplified Full Envelope Model with Detailed 
FIOO/MCVS Simulation 



States: X=[N1, N2, TT4LO, TT45LO]T 

Inputs: U=[WF, AJ, CIVV. RCVV, BLCjT 

Outputs: Y=[N1, M2, PT4, PT6, FTIT, FMMX, SMHCjT 


Figure 3-15 Stand Alone Simplified Simulation 
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Figure 3-18 Comparison of the Transient Performance of the Nonlinear Engine 

( ) and the Simplified Model { ) at Altitude = 10,000 

feet, Mach No. =0.9 and PLA Step From 70 Degrees to 83 Degrees 
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Figure 3-19 Comparison of the Transient Performance of the Nonlinear Engine 

( ) and the Simplified Model ( ) at Altitude = 20,000 

feet, Mach No. = 0.75 and PLA Step From 20 Degrees to 83 Degrees 


















SECTION 4 

BASELINE DIA ALGORITHM 
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An advanced concept for the Detection, Isolation and Accommodation (DIA) 
of sensor failures in gas turbine engine control systems, was developed under 
NASA contract NAS3-22481. This concept was selected based upon the results of 
a screening process of five candidate concepts for their DIA performance in a 
turbine engine control system. The selected concept was then evaluated in 
comparison to a parameter synthesis concept for DIA performance. 

The five concepts were formulated based upon techniques from estimation 
and filtering theories and statistics. They were evaluated by application in 
an FIDO engine and Multivariable Control System (FIOO/MVCS) simulation. The 
FIDO Multivariable Control System was developed under Air Force Contract 
F33615-75-C-2053. In the screening process a simplified version of the 
simulation of the FIDO engine and multivariable control system was used. This 
simplified simulation was also used as the model for the filters in the 
various advanced detection, isolation and accommodation concepts. 

The advanced concept from NASA contract NAS3-22481 served as the baseline 
DIA algorithm in this program. The following sections describe this concept 
and discuss the problem areas identified in the above referenced contract. 

4.1 ALGORITHM DESCRIPTION 


The selected advanced DIA concept utilizes a Weighted Sum- Squared 
Residual technique to detect soft failures. A normal mode Kalman filter; i.e., 
a filter designed to use all sensor inputs with no failure assumed on those 
inputs, is used to generate the residuals and the estimated measurements. 
Detection and isolation of hard-over failures is also accomplished with the 
normal mode filter by testing for large values of the individual residuals. 
Isolation of soft failures is accomplished by likelihood ratio based testing 
of innovations from a bank of Kalman filters, each designed with the 
assumption of one failed input. Accommodation is accomplished by reconfiguring 
the normal mode Kalman filter to eliminate the failed sensor from the input. 
The baseline DIA concept is shown in Figure 4-1 and is described in detail in 
Appendix A. 

The configuration of the multivariable control and fault detection logic 
used in conjunction with the FIDO engine simulation is shown in Figure 4-2. 

The form of the control law is given by 

“ = " vV^pb’ 

where U is the input vector [WF AH CIVV RCVV BLC]^, Zp is the estimate of 
the output vector, [N1 N2 PT4^PT6 FTIT]T, and is the estimate of the 
vector [N1 PT6]'. The vector Zi is a subset of the vector Zp. The hat 
denotes the estimates. Ub, Zpb and Zib are the base point vectors and 


preceding page blank not FILMED’ 
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Figure 4-1 Baseline DIA Algorithm 
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Figure 4-2 Generalized Block Diagram of Failure Detection, Isolation, and 
Accommodation Logic 
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Cp and C-j are proportional and integral control gain matrices. The 
proportional part of the control provides regulation and the integral part 
provides trim for the fan speed (Nl) and augmentor pressure (PT6). Note that 
the control law uses the estimates for both the proportional and integral 
portions. The variables in the vectors above are defined as follows. 

inputs (U): 

WF fuel flow (Ibs/hr) 

AJ nozzle area (sq.ft.) 

CIVV compressor inlet guide vane (deg) 

RCVV rear compressor variable vane (deg) 

BLC bleed flow {%) 

outputs (Z): 

Nl fan speed (rpm) 

N2 compressor speed (rpm) 

PT4 burner pressure (psia) 

PT6 augmentor pressure (psia) 

FTIT fan turbine inlet temperature (°R) 

4.2 PROBLEM DEFINITION 

The results of the detailed evaluation of the advanced DIA concept 
against the parameter systhesis concept are presented in the final report on 
NASA Contract NAS3-22481 [1]. The DIA performance of the advanced concept was 
generally good and it was demonstrated to be a viable concept for real-time 
applications. Several problem areas were identified in the referenced 
contract. These problems consisted primarily of inaccuracies in the simplified 
nonlinear engine model used in the estimation filters of the advanced concept, 
steady state biases on the outputs of the estimation filters, and steady state 
hangoff errors in the engine power setting parameters of fan speed (M) and 
augmentor pressure (PT6). 

In the following paragraphs, the problem areas identified are discussed. 
4.2.1 DIA/Control Interaction 

The FIOO/MVC control mode requires Nl and PT6 trimmed to their reference 
points. In the baseline DIA algorithm these outputs hang off from their 
reference points because the estimated values of these parameters are fed back 
to the control law (see Figure 4-1). DIA algorithm revision is required either 
to allow feedback of actual sensor values or to eliminate the bias errors from 
the estimates such that the estimator outputs equal sensor outputs when there 
is no failure. Three revisions were defined to accomplish this objective and 
are discussed in Section 5.1. 
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4.2.2 DIA Performance 

The estimation errors in fan turbine inlet temperature (FTIT) were very 
large at many flight conditions (reference 1), causing false alarms. The 
filter gain on FTIT was also low and was not very effective in minimizing the 
residuals. An improved engine model and improved filter gain schedule were 
required to improve the estimate of FTIT and reduce the possibility of false 
alarms. 
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DEVELOPMENT AND EVALUATION OF REVISIONS TO THE DIA ALGORITHM 


The revisions to the DIA algorithms were developed to eliminate the 
steady state hangoff errors in the engine outputs. The DIA algorithm discussed 
in section 4 was used as the baseline algorithm. Three revisions were 
developed and were evaluated using the FIOO/MVCS/DIA simulation as the 
testbed. As a result, one revision was selected and expanded for full envelope 
operation. The resultant revision was implemented in the FIOO/MVCS/DIA 
simulation, for detailed evaluation. 

This section presents a discussion of each of the three revisions, 
results of the evaluation, development of the filter gain matrix schedule and 
the microprocessor requirements for the revised DIA algorithm. 

5.1 DESCRIPTION OF THE DIA ALGORITHM REVISIONS 


The three logic revisions which were studied in this program, either 
reconfigure the control structure or supplement^the estimator logic with 
integrators which drive the residual errors (Z-Z) to zero. These revisions are 
described in the following sections. 

5.1.1 DIA Algorithm Revision 1 

In Revision 1, the sensor values are fed back to the control algorithm 
when there are no detected sensor failures. In this situation, any biases on 
the estimator outputs will not affect the accuracy of the closed loop control 
mode because the estimator is not in the control loop. When a sensor failure 
is detected, the appropriate estimator output will be substituted for the 
sensor value. Any bias on the estimator output will contribute to the degraded 
engine operation when running on estimated values. This logic revision is 
shown in Figure 5-1. 

The form of the control law (equation 1 in Section 4) for this revision 
is as follows. 


No failure: 



P P 


■pb 




2,,) dt 


Failure in Channel 1 (Nl): 


U = U + 
b 


C 

P 


Nl-Nlb 


N2-N2b 

PT4-PT4b 

PT6-PT6b 

FTIT-FTITb 


+ 


C r Nl - Nib 
iJ LPT6 PT6b 


dt 


( 1 ) 


( 2 ) 
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Figure 5-1 DIA Algorithm Revision 1 

where Zp is the output vector [N1 N2 PT4 PT6 FTITjT and Zi is the vector 
[N1 PT6]i. Not§^that in equation 2, the sensed value of N1 is replaced by 
its estimate (Nl) after failure isolation. 

The responses of the engine and the estimator, with Revision 1 
implemented in the FIOO/MVCS/DIA simulation, are shown in Figure 5-2 for a no 
failure case at the flight point of alt/M/PLA=0/0/36. This figure shows time 
histories of power lever angle (PLA), fan speed (Nl or SNFAN), compressor 
speed (N2 or SNCOM) , burner pressure (PT4), augrnentor pressure (PT5), fan 
turbine inlet temperature (FTIT), net thrust (FNMX) and compressor surge 
margin (SWC). At time t = 0. seconds, Nl and PT6 are at their reference 
points. A small initialization transient is seen in all outputs. After the 
transient is over, Nl is trimmed to its reference point but PT6 has a small 
hangoff. This hangoff error goes to zero at a slow rate, due to a low value of 
the PT6 integrator gain in the Multivariable Control mode. 

5.1.2 DIA Algorithm Revision 2 

In Revision 2, the estimator outputs are fed back all of the time to the 
proportional or Linear Quadratic Regulator (LQR) portion of the control mode. 
When there are no detected sensor failures, the sensor outputs are fed back to 
the integral portion of the control mode. In this situation actual Nl and PT6 
will be trinmed to their reference points and any biases on the estimator 
outputs will not affect the steady state control accuracy. Furthermore, rapid 
transient failures of sensors should have less impact on the system than with 
Revision 1 since the integrators will act as 'filters' on the actual sensor 
measurements. The estimator outputs, driving the proportional mode, will not 
respond rapidly to a failure. When a sensor failure is detected, the 
appropriate estimator output will be substituted for the actual sensor value 
in the integral control mode. This logic revision is shown in Figure 5-3. 
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Figure 5-3 DIA Algorithm Revision 2 


The control law (equation 1 in Section 4) for this revision can be 
written in the following form. 

No Failure: 

' "b * VVV "/"i 

Failure in Channel 1 (Nl): 


A 

Note that Nl is being used in the integral portion after failure isolation. 

Figure 5-4 shows the response of the engine and the estimator outputs for 
the no-failure case at the flight condition 0/0/36 with Revision 2 implemented 
in the simulation. The parameters plotted are the same as those shown in the 
plots for Revision 1. These plots also exhibit an initial minor transient due 
to simulation initialization. The small hangoff in PT6 is due to the reasons 
described in Section 5.1.1. 
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Figure 5-4 Steady State Results for Revision 2 with No Failure at the 

Flight Condition OK/OM, PLA = 36.0 Degrees. Engine ( ), 

Estimate ( ), Reference ( ) 
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5.7.3 DIA Algon'thm Revision 3 

In this revision the estimator outputs are fed back all of the time to 
both the proportional (LQR) and integral portions of the control algorithm. 
Supplementary logic is implemented in the detection, isolation and 
accommodation algorithm to trim out the estimator output bias errors in steady 
state. As an example, this logic could take the form of low gain or "slow" 
trim integrators driven by errors between actual sensor outputs and estimator 
outputs. This logic revision is shown in Figure 5-5. 

In this case the control law is written as 

" ' \ " <:p <W " <5> 

in both the failure and the no failure cases. Equation (5) is the same as 
equation (1) in Section 4. 

To design the supplementary integral part for the estimator, the approach 
selected was to estimate the bias in the estimate and add it to the 
corresponding estimate. This is described by the following equations. 


6 X = F(X- X|^) + G(U-Uj^) + Kp(Z-Z) 
6 t = K^.(Z-Z) 

Z = Zjj + H(X-Xjj) + D(U-Ujj) + b 


In matrix form, the above equations can be written as 


(Z - Z) 


X 





A 


" ” 


- - 

8X 


F 

0 


6X 


G 




= 

0 

0 


5b 

+ 

0 

6U + 

P 



- 

- 


- 


- - 


A 


- 

1 


A. 





6 Z 

= 

H 

I 


5 X 

+ 


D 6 U 





J 


5b 






The error equations can be written as follows. 

A 

(Z - Z) 


5 X 


o 

u. 


5 x" 

+ 

K 


= 





P 



_0 0_ 


[6 bj 




6Z 


[h i] 


6x 

6b 


( 6 ) 

(7) 

( 8 ) 


(9) 

( 10 ) 


( 11 ) 


( 12 ) 
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Figure 5-5 DIA Algorithm Revision 3 
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^ A A 

v/here X = X - X and b = b - b. The filter gains were designed using the model 
from equation (5). The criteria followed in the integral gain design was to 
place integrator roots so that they are slower than the estimator roots with 
no integrators. 

For the baseline DIA algorithm and for Revisions 1 and 2, the detection 
and isolation thresholds were chosen to be large to encompass modelling 
errors. Since the modelling errors are 'eliminated' in Revision 3, the 
detection threshold was made smaller. The isolation threshold was unchanged 
because integrators were not incorporated into the bank of isolation filters. 
As a result of the smaller residuals, the time to detect a failure in Revision 
3 has improved as can be seen in Table 5-1. 

TABLE 5-1 


COMPARISON OF THE DETECTION AND ISOLATION TIMES 
FOR THE THREE REVISIONS 


(i) 


Flight Condition - 

0/0/36 



Failure Mode 

PT4 soft failure 15 



Time to Detect 

Time to Isolate 

Revision 

1 

2.892 

0.122 

Revision 

2 

2.962 

0.114 

Revision 

3 

0.716 

1.86 

(ii) 


Flight Condition - 

20K/.3/83 



Failure Mode 

PT6 drift of 2 PSI/ 



Time to Detect 

Time to Isolate 

Revision 

1 

2.524 

0.226 

Revision 

2 

2.490 

0.260 

Revision 

3 

0.486 

2.190 

( i i i ) 


Flight Condition - 

45K/.9/83 



Failure Mode 

PT4 drift of 20 PSI/ 



Time to Detect 

Time to Isolate 

Revision 

1 

1.996 

0.160 

Revision 

2 

2.028 

0.156 

Revision 

3 

0.496 

1.492 


The reason for the higher isolation time for Revision 3 is as follov/s. In 
Revisions 1 and 2 the detection filter residuals are high. After detection of 
a soft failure, the isolation filters are initialized to the outputs of the 
detection filters so that isolation filter residuals are also high. From this 
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initial condition the residuals grow at each time step and finally cross the 
thresholds (failure isolation), as shown in Figure 5-6. In Revision 3 the 
isolation filter residuals are initially very small and therefore take a 
longer time, than the residuals of Revisions 1 and 2, to cross the isolation 
thresholds (Figure 5-7). 

Once a sensor failure is detected, isolated and accommodated, the 
magnitude of the detection thresholds must be increased to accommodate the 
larger residuals which have built up. If this is not done, false alarms will 
result. The detection threshold is maintained at the larger value until the 
added integrator logic in the estimator decreases the residuals. Any faulty 
measurements are eliminated from the integral portion of the estimator logic. 

The responses of the engine and the estimator with Revision 3, are shown 
in Figure 5-8 for the no-failure case at the flight condition 0/0/36. The 
parameters plotted are the same as those shown in the plots for Revisions 1 
and 2. The small transient seen is caused by the initialization of the 
simulation. The residual errors between the engine outputs and the estimator 
outputs are zero. 

5.2 COMPARISON OF DIA ALGORITHM REVISIONS 

This section presents a qualitative and quantitative comparison of the 
features of the three DIA algorithm revisions. The qualitative comparison 
includes complexity, and transient response of the closed loop system to 
failures. The quantitative comparison includes tabulation of the errors from 
engine outputs to reference points, and errors from engine outputs to 
estimator outputs (residuals). 

5.2.1 Complexity 

Revision 1 is the least complex of the three revisions. It involves 
switching from sensed values to estimates in case of a failure whereas sensed 
values are used in the case of no failure. Revision 2 requires splitting the 
control law into two parts, proportional and integral, which work on estimates 
and sensors, respectively. The level of complexity is slightly higher than 
Revision 1. Revision 3 requires design of integral gains and a higher order 
model for the estimator. It is the most complex of all the three revisions. 

5.2.2 Steady State Errors (No Failure) 

Steady state errors were compared to evaluate the DIA/Control 
interactions in the absence of a failure. 

The three revisions were compared by tabulating the following differences 

i) Difference between actual engine outputs and the reference point 
schedules. This provides a gross check on the operating point. 

ii) Difference between actual engine outputs ajid the estimates 
(residuals). This indicates whether the revision has a positive or 
negative impact on the magnitude of inherent modelling errors. 
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Figure 5-7 Time History of the Residuals in Revision 3 


fHAK 



Figure 5-8 Steady State Results for Revision 3 with No Failure at the 

Flight Condition OK/OM, PLA = 36.0 Degrees. Engine ( ), 

Estimate ( ), Reference ( ) 
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These differences were evaluated for a no-failure case at the flight 
point of altitude = 0 ft., Mach no. = 0, PLA = 36 degrees. The failure induced 
was a hard failure of +1000 RPM bias in the N1 sensor at 1.0 seconds (Figures 
5-9b, c, and d respectively, for each revision). Results for the baseline DIA 
algorithm (without any revisions) are also included for comparison. 

The Tables 5-2a and 5-2b contain the above mentioned differences for the 
no-failure case. It can be seen from Table 5-2a that in Revisions 1, 2 and 3, 
N1 and PT6 are very close to the reference point; i.e., the engine operating 
points are approximately the same for all three revisions. As expected the 
baseline DIA algorithm exhibits larger errors. Table 5-2b clearly demonstrates 
that with Revision 3 the residual errors are zero because of the trim 
integrators in the estimator. The estimation errors for Revisions 1 and 2 are 
comparable to the baseline DIA algorithm. 

TABLE 5-2a 

COMPARISON OF STEADY STATE ERRORS FOR THE THREE 
REVISIONS AND THE BASELINE DIA ALGORITHM 

FLIGHT CONDITION: ALT = 0 FT, M = 0, PLA = 36 
FAILURE MODE: NO FAILURE 



BASELINE DIA 

REVISION 1 

REVISION 2 

REVISION 3 

SNFAN-SNFSCH 

-43.6 (.57) 

0.1 (e) 

0.1 (e) 

0.1 (€) 

SNCOM-SNCSCH 

35. (.32) 

16. (0.15) 

15. (0.14) 

16. (0.15) 

PT4-PT4SCH 

-.37 (.22) 

-1.53 (.89) 

-1.56 (0.91) 

-1.53 (0.89) 

PT6-PT6SCH 

0.433 (1.91) 

0.015 (0.07) 

0.01 (0.04) 

0.015 (0.07) 

FTIT-FTITSH 

24.3 (1.64) 

18.33 (1.24) 

18.43 (1.24) 

18.43 (1.24) 

FNMX-FNMX[^OM 

106. (2.14) 

0. (0.) 

-1.5 (0.03) 

0.3 (e) 

SMHC-SMHC[^OM 

0.0011 (0.5S) 

0. (0.) 

-0.0004 (0.19) 

-0.00002 (0.01) 


(.) ARE PERCENTAGES OF SCHEDULED VALUES 
e DENOTES A NUMBER APPROACHING ZERO 
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TABLE 5-2b 

COf'PARISON OF STEADY STATE ESTIMATION ERRORS FOR THE THREE 
REVISIONS AND THE BASELINE DIA ALGORITHM 

FLIGHT CONDITION: ALT = 0 FT, M = 0, PLA = 36 

FAILURE MODE: NO FAILURE 



BASELINE DIA 

REVISION 1 

REVISION 2 

REVISION 3 

SNFAN-SNFEST 

-43.6 (.57) 

-47.7 (0.62) 

-45.8 (0.59) 

€(€) 

SNCOM-SNCEST 

18. (0.17) 

19. (0.18) 

18. (0.17) 

€(0 

PT4-PT4EST 

-1.75 (1.02) 

-1.64 (0.95) 

-1.7 (0.99) 

6(0 

PT6-PT6EST 

0.431 (1.9) 

0.43 (1.91) 

0.409 (1.80) 

6(6) 

FTIT-FTIEST 

-1. (0.07) 

-4.4 (0.29) 

-3.7 (0.25) 

6(6) 

FNMX-FNMXEST 

60.2 (1.21) 

47.5 (0.96) 

43.7 (0.88) 

47.6 (0.96) 

SMHC-SmCEST 

-0.0013 (0.73) 

-0.0005 (0.29) 

-0.0009 (0.48) 

-0.0005 (0.29) 


(.) ARE PERCENTAGES OF SCHEDULED VALUES 
e DENOTES A NUMBER APPROACHING ZERO 


Overall comparison of the revisions using Tables 5-2a and 5-2b does not show a 
clear winner. All three revisions accomplish the goal of eliminating the 
effect of estimator hangoff errors on the engine operating point. Other 
variations in the differences shown in the tables are not judged to be 
significant enough to select one revision over the other two. 

5.2.3 Failure Transients 

The flight conditions and the failure modes for which failure transients 
were evaluated for the three revisions were evaluated are listed in the 
following Table. 



FI ight Condition 

Failed Channel 

Rate of Drift 

(i) 

0/0/36 

N1 

+1000 RPM (jump) 

(ii) 

0/0/36 

N2 

+1000 RPK (jump) 

( i i i ) 

0/0/36 

N1 

+5000 RPM/sec 

(iv) 

0/0/36 

PT4 

+15 PSI/sec 

(v) 

45K/.9/83 

PT6 

+2 PSI/sec 

(vi) 

45K/.9/83 

PT4 

+20 PSI/sec 

(vii) 

2 OK/. 3/8 3 

N2 

+2000 RPM/sec 
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The results for each of the above failures modes for each revision are 
presented below. 

5.2.3. 1 N1 Hard Failure At The Flight Condition 0/0/36 

A failure of +1000 RPM was induced in the N1 sensor at t=1.0 second for 
the flight condition 0/0/36. In the baseline DIA algorithm a hard failure is 
detected and isolated at the same time. All three revisions detected and 
isolated the failure as a hard failure and all took the same length of time to 
detect and isolate. No false alarms were detected. The time to detect was 
0.002 seconds, which is the cycle time of the simulation. Figures 5-iJa through 
5-9d show the failure transients for the baseline DIA algorithm and for each 
revision. These figures consist of the time histories of PLA, fan speed (SNFAN 
or Nl), compressor speed (SNCOM or N2), burner pressure (PT4), augmentor 
pressure (PT6), fan turbine inlet temperature (FTIT), net thrust (FNMX), 
compressor surge margin (SMHC), fuel flow (WF),and nozzle area (AJ). 

In general, the transient results for the fil failure are comparable among 
the three revisions and the baseline DIA algorithm. In Revisions 1 and 2, the 
estimate of Nl (Nl) is higher than its reference point. When Nl is substituted 
for Nl, the control cuts down on fuel flow to bring Nl to the reference point. 
This causes the engine to 'slow down' as can be seen in Figures 5-9b and 5-9c. 
In Revision 3, t^l is equal ^to Nl. When the failure is isolated the integrator 
which takes the residual (Nl-Nl) to zero is turned off. The biased estimate of 
M causes the engine to 'slow down' as shown in Figure 5-9d. 

The 'hump' in the estimator response is caused primarily by the zeroing 
of the first column of the filter gain matrix which is done to accommodate the 
Nl failure. Before the failure, the filter equation is written as follows. 
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Figure 5-9b Transient Results for Revision 1 with N1 Hard Failure (+1000 rpm 
Step) at the Flight Condition OK/OM, PLA = 36.0 degrees. Engine 
( ), Estimate ( ), Reference { ) 









Figure 


-9c Transient Results for Revision 2 with N1 Hard Failure (+1000 rpiti 
Step) at the Flight Condition OK/OM, PLA = 36.0 degrees. Engine 
{ ), Estimate ( ), Reference ( ) 
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F i gure 

I 


-9d Transient Results for Revision 3 with N1 Hard Failure (+1000 rpm 
Step) at the Flight Condition OK/OM, PLA = 36.0 degrees. Engine 
( ), Estimate ( ), Reference ( ) 
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A 

6 X 


F6X-+ G 6U + [K^ 


K2 K3 Kg] (Z-Z) 


where 6's are perturbations away from the nominal and 

K-j are columns of the K matrix. After the N1 failure is isolated, the first 
column of the K matrix is made zero which results in a step input, as shown in 
the following equation. 

5 X = F6X + G 6U + [K^ K2 K3 Kg] (Z-Z) 

- [Ki 0 0 0 0] (Z-Z) -Kt-tf) 


where tf is the time at which the step input is applied. This is 
demonstrated in Figure 5-10 for a case with no failure, where the first column 
of the K matrix was made zero at t=1.0 seconds. Thus, the upward excursion in 
the Nl, N2, PT4, and PT6 outputs at t=1.0 seconds in Figure 5-9 is the effect 
of making the first column of the K matrix zero. The downward trend at the 
later time is the control system reaction trying to bring Nl to its reference 
point. 

The control excursions for Revision 2 (Figure 5-9c) are larger than for 
Revision 1 (Figure 5-9b). In Revision 2 the change in control is caused by the 
change in all estimates, which feed back to the LQR portion of the control 
mode, caused by zeroing the first column of the K matrix. This causes a larger 
excursion than that for Revision 1 since in Revision 1 only the estimated Nl 
is substituted for actual Nl in the LQR portion of the control mode, as shown 
in the following. 


aUf_ = [C ] 


P 


"6N1 " 
6N2 
6PT4 
6PT6 
6FTIT 


After the failure, Nl is 
following equation. 


aUf+ = [C ] 
P 


substituted for Nl, and the control is given by the 


"6N1 “ 


(5N1-6N1) 

6N2 


0 

6PT4 

+ [C ] 

0 

6PT6 

P 

0 

_6FTIT 


0 


where6Uf+ is the change in control after the failure is accommodated at time 
t^ and l(t-t^) is the step applied at the time the failure is accommodated. 
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Figure 5-10 Transient Results for No Failure Case with First Column of 

Filter Gain Matrix Zeroed at t=l. second; at the Flight Condition 

OK/OM, PLA = 36.0 degrees. Engine ( ), Estimate 

( ), Reference { 





5. 2. 3. 2 N2 Hard Failure At The Flight Condition 0/0/36 

An N2 hard failure of +1000 RPM was induced at t=1.0 seconds at the 
flight condition 0/0/36. All the revisions detected and isolated the failure 
as an N2 hard failure at t=1.002 seconds (cycle time of the simulation). 
Figures 5-lla through 5-llc show the responses of engine and estimator outputs 
for each revision. The failure transients for Revisions 2 and 3 are comparable 
and are smoother compared to those for Revision 1. 

5. 2. 3. 3 N1 High Drift Rate Failure At The Flight Condition 0/0/36 

An N1 failure of +5000 RPM/second (fast rate drift) was induced at t=0.1 
seconds and each revision tested for its response. Figures 5-12a through 5-12c 
present the failure transients for each revision. It is observed that Revision 
3 demonstrates slightly more degradation in the failed channel (Nl) compared 
to Revisions 1 and 2. Other than this and the fact that the responses for 
Revision 1 are somewhat more oscillatory than those for Revisions 2 and 3, the 
performance of the three revisions are pretty much comparable. 

5. 2. 3. 4 PT4 Drift Failure At The Flight Condition 0/0/36 

Another failure case of a slow drift rate was simulated. This failure has 
a drift rate of +15 PSI/second in the PT4 sensor induced at 0.1 seconds for 
flight condition 0/0/36. The failure transients of each revision are shown in 
Figures 5-13a through 5-13c. The failure detection and isolation properties of 
each revision are as follows. 




Time to Detect 

Time to Isolate 

False Alarm 

Misses 

Revision 

1 

2.892 

0.122 

none 

none 

Revision 

2 

2.962 

0.114 

none 

none 

Revision 

3 

0.716 

1.86 

none 

none 


Revision 3 takes a relatively short time to detect the failure since the 
detection threshold is small compared to Revisions 1 and 2. However it takes 
longer to isolate the failure after detection. Total time to detect and 
isolate the failure is slightly better for Revision 3 then for Revisions 1 and 

2 . 


It is observed from Figures 5-13a through 5-13c that Revision 2 is least 
affected by the failure. Note that the three figures are plotted on the same 
scale. If the results for Revision 2 are plotted on an expanded scale (Figure 
5-14), the accommodation transient can be seen. It is much smaller in 
magnitude compared to the accommodation transients of Revisions 1 and 3. 

It is observed from Figure 5-13c that Revision 3 responses approach 
steady state conditions somewhat slower than Revisions 1 and 2, due to the 
additional trim integrators in the estimator. As noted earlier, the slow 
response of these various transients is attributed to the long time constant 
of the integral trim logic in the multivariable control. This was verified by 
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Figure 5-7 


la Transient Results for Revision 1 with N2 Hard Failure (+1000 rpm 
Step) at the Flight Condition OK/OM, PLA = 36.0 degrees. Engine 
( ), Estimate ( ), Reference ( ) 
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F i gure 


-lib Transient Results for Revision 2 with N2 Hard Failure (+1000 rpm 
Step) at the Flight Condition 20K/0.3M, PLA = 83.0 degrees. 

Engine ( ), Estimate ( ), Reference 

( ) 
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Figure 5-llc Transient Results for Revision 3 with N2 Hard Failure (+1000 rpm 
Step) at the Flight Condition OK/OM, PLA =36.0 degrees. Engine 
( ), Estimate ( ), Reference { ) 
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Figure 5-12a Transient Results for Revision 1 with N1 Hard Failure (+5000 rpiti/ 
Second) at the Flight Condition OK/OM, PLA = 36.0 degrees. Engine 
{ ), Estimate { ), Reference ( ) 
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Figure 5-12b Transient Results for Revision 2 with N1 Hard Failure (+5000 rpm/ 
Second) at the Flight Condition OK/OM, PLA = 36.0 degrees. Engine 
( ), Estimate { ), Reference ( ) 
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Figure 5-12c Transient Results for Revision 3 with N1 Hard Failure (+5000 rpm/ 
Second) at the Flight Condition OK/OM, PLA = 36.0 degrees. Engine 
( ) Estimate ( ), Reference ( ) 
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Figure 5-13a Transient Results for Revision 1 with PT4 Failure (+15 psia/ 
second) at the Flight Condition OK/OM, PLA = 36.0 degrees 
Engine ( ), Estimate { ), Reference ( ) 
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Figure 


-73b Transient Results for Revision 2 with PT4 Failure (+15 psia/ 
second) at the Flight Condition OK/OM, PLA = 36.0 degrees 

Engine ( ), Estimate ( ), Reference 

( ) 
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Figure 5-13c Transient Results for Revision 3 with PT4 Failure (+15 psia/ 
second) at the Flight Condition OK/OM, PLA = 36.0 degrees 

Engine ( ), Estimate ( ), Reference 

( ) 


74 







Figure 5-14 Transient Results for Revision 2 v/ith PT4 Failure (+15 psia/ 
second) at the Flight Condition OK/OM, PLA = 36.0 degrees 

Engine ( ), Estimate ( ), Reference 

( ) 
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increasing the respective gains to make the time constant corresponding to the 
PT6 integrator shorter. The results are shown for the revision 1 case in 
Figure 5-15, where Nl and PT6 are shown trimmed to their respective reference 
points . 

For this particular failure case. Revision 2 is clearly the best of the 
three revisions. 

5. 2. 3. 5 PT6 Drift Failure At The Flight Condition 45k/0.9/83 

A PT6 drift of +2 PSIA/sec was simulated at the flight condition of 
45K/.9/83. The failure was induced at t=0.1 seconds. Figures 5-16a through 
5-16c show the engine and estimator output responses for the three revisions. 
It is noted that PT6 is not initialized at the reference schedule value since 
nozzle area is saturated to its minimum position. The failure characteristics 
are as follows. 




Time to Detect 

Time to Isolate 

False Alarm 

Misses 

Revision 

1 

2.524 

0.226 

none 

none 

Revision 

2 

2.490 

0.260 

none 

none 

Revision 

3 

0.486 

2.190 

none 

none 


The detection time for Revision 3 is short and the isolation time is long 
compared to Revisions 1 and 2, for reasons discussed earlier. 

The slower integral trim action of Revision 3, compared to Revision 1 and 
2, can be seen in the low rotor speed (SNFAN) response. Also, the slow 
integral trim action on PT6 (in this case increasing nozzle area to reduce PT6 
estimate to the Reference schedule) is evident in all three revisions. As with 
the previous failure case, the failure accommodation transients are minimal 
for Revision 2. 

5. 2. 3. 6 PT4 Drift Failure At The Flight Condition 45k/0.9/83 

A PT4 drift failure was simulated at the flight condition 45K/0.9/83, 
with a drift rate of 20 PSIA/second. The failure was induced at 0.1 seconds. 
Figures 5-17a through 5-17c demonstrate the engine and the estimator output 
responses for the three revisions. PT6 is not initialized at the reference 
schedule value since nozzle area is saturated to its minimum position. The 
failure performance of the three revisions is as follows. 




Time to Detect 

Time to Isolate 

False Alarm 

Misses 

Revision 

1 

1.996 

0.120 

none 

none 

Revision 

2 

2.028 

0.156 

none 

none 

Revision 

3 

0.496 

1.492 

none 

none 


A general comparison of the failure accommodation transients for the three 
revisions shows Revision 2 to again be the best performer. 
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Figure 5-15 Transient Results for Revision 1 with Modified Integral Gains, 
PT4 Failure (+15 psia/sec) at the Flight Condition OK/OM, PLA = 

36.0 degrees. Engine ( ), Estimate { ), 

Reference ( ) 
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Figure 5-16a Transient Results for Revision 1 with PT6 Failure (+2 psia/ 
second) at the Flight Condition 45K/0.9M, PLA = 36.0 degrees. 

Engine ( ), Estimate ( ), Reference 

( ) 
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F i gure 


-16b Transient Results for Revision 2 with PT6 
second) at the Flight Condition 45K/0.9M, 

Engine ( ^) , Estimate ( 

{ ) 


Failure (+2 psia/ 
PLA = 36.0 degrees 
), Reference 
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Figure 5-16c Transient Results for Revision 3 with PT6 Failure (+2 psia/ 
second) at the Flight Condition 45K/0.9M, PLA = 36.0 degrees 

Engine ( ), Estimate ( ), Reference 

( ) 
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Figure 5-17a Transient Results for Revision 1 with PT4 Failure (+20 psia/ 
second) at the Flight Condition 45K/0.9M, PLA = 83.0 degrees 

Engine ( ), Estimate ( ), Reference 

( ) 
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Figure 5-17b Transient Results for Revision 2 with PT4 Failure (+20 psia/ 
second) at the Flight Condition 45K/0.9M, PLA = 83.0 degrees 

Engine ( ), Estimate { ), Reference 

( ) 
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Figure 5-17c Transient Results for Revision 3 with PT4 Failure (+20 psia/ 
second) at the Flight Condition 45K/0.9M, PLA = 83.0 degrees 

Engine ( ), Estimate ( ), Reference 

( ) 
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5. 2. 3. 7 N2 Drift Failure At The Flight Condition 20K/0.3/83 

An N2 drift failure of 2000 RPM/sec was induced at t = 0.1 second. The 
engine and estimator output responses are demonstrated in Figures 5-18a 
through 5-18c. The failure detection and isolation times for each revision are 
as follows. 




Time to Detect 

Time to Isolate 

False Alarm 

Misses 

Revision 

1 

0.672 

0.204 

none 

none 

Revision 

2 

0.748 

0.200 

none 

none 

Revision 

3 

0.172 

0.684 

none 

none 


All three revisions demonstrate comparable performance for this failure case. 
5.3 EVALUATION SUMMARY 

The conclusions summarized here are based on the results of the failure 
performances presented in the previous section. 

(a) All three revisions achieve the primary goal of eliminating the 
engine steady state hang-off errors in the fan speed, Nl, and 
augmentor pressure, PT6. In the case of no failure, all revisions 
have the same steady state operating point. The augmentor pressure 
converges to its reference point at a slow rate determined by the 
time constant of the integrators in the multivariable control logic. 

(b) Revisions 1 and 2 are far less complex than Revision 3. Revisions 1 
and 2 require modification in several lines of code whereas Revision 
3 requires design of integral gains and supplementing the filter 
with integral trim logic. 

(c) The residuals are integrated to zero in Revision 3 but they are 
large in Revisions 1 and 2, as they are in the baseline DIA 
algorithm. 

(d) All three revisions detected and isolated the simulated failures. No 
false alarms were issued and there were no misses. 

(e) In the cases of hard failures (see Figures 5-9b through b-Sd and 
Figures 5-lla through 5-llc), the three revisions have comparable 
responses. The accommodation transients in all cases are alike. The 
hangoff in the fan speed (Figures 5-9b through 5-9d) and in 
compressor speed (Figures 5-lla through 5-llc) after failure 
isolation is comparable in all cases. In the case of an N2 hard 
failure. Revision 1 (Figure 5-lla) has more excursions in the inputs 
and outputs than Revisions 2 and 3. 
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Figure 5-18a Transient Results for Revision 1 with N2 Failure (+2000 rpm/ 
second) at the Flight Condition 20K/0.3M, PLA = 83.0 degrees 

Engine { ^), Estimate ( ), Reference 

( ) 
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Figure 5- 7 8b 


Transient Results for Revision 2 with N2 Failure (+2000 rpm/ 
second) at the Flight Condition 20K/0.3M, PLA = 83.0 degrees 
Engine { ), Estimate ( ), Reference 
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Figure 5-78c Transient Results for Revision 3 with N2 Failure (+2000 rpm/ 
second) at the Flight Condition 20K/0.3f'l, PLA = 83.0 degrees 

Engine ( ), Estimate ( ), Reference 

( ) 


87 





(f) In all the high and low rate drift failures that were simulated, the 
accommodation transient is visible. This transient is comparable in 
all three revisions for N1 and N2 high-rate drift failures (see 
Figures 5-12a through 5-12c and 5-18a through 5-18c, respectively). 
For the PT4 and PT6 simulated failures (see Figures 5-13, 5-16 and 
5-17), the drift in the outputs of Revision 2 is small. This 
results from the filter gains associated with PT4 and PT6 being 
small which means that the failure affects the estimates at a very 
slow rate. The accommodation transient for Revision 2 is also 
smaller than Revisions 1 and 3. 

g) The improved detection capability of Revision 3 (for drift failures) 
was offset by a potential increased sensitivity to false alarms. 

This is a result of the isolation filters being the same in all 
revisions. 

h) The additional integrators tied to the filter in Revision 3 
introduce more dynamics resulting in the slowing down of the system. 
This can be observed in Figures 5-13, 5-16 and 5-17. 


5.4 DEVELOPMENT OF REVISED FILTER GAIN f^IATRIX 

Polynomial curve fits of the elements of the filter gain matrix K were 
developed for use with the full envelope simplified nonlinear model of the 
FlOO engine. An error analysis was performed which compares the K matrix 
obtained from the polynominal schedule with the individual K matrices, 
designed for the representative flight points. 

5.4.1 Filter Gain Design 

Filter gains can be designed by using either the linear engine models 
obtained from the thermodynamic simulation (Section 3.2), or by computing the 
linear models at given flight points from the polynomial curve fits of the 
linear model matrices (Section 3.5). The latter method was used in order to be 
consistent with the actual implementation in which the filter will utilize the 
simplified nonlinear engine model implemented with the polynomial curve fits. 
Linear models were computed from the polynomial curve fits at the flight 
points given in Table 5-3. It was noticed from the linear model data that 
there are several flight points where the model matrices are the same for all 
power points. This is shown in Table 5-3 using brackets. The elimination of 
duplicate models reduces the number of models available for gain design from 
109 to 76. 

The polynomial curve fits of the F, F"^G, H and D matrix elements 
yields matrices with correction factors applied. The filter gain design can be 
performed either by using the "corrected" matrices or the "uncorrected" 
matrices. Figures 5-19 and 5-20 demonstrate the corrected and uncorrected 
F(l,l) element of the F rnatrix, respectively, calculated from the polynomial 
curve fits. The corrected matrix data show reduced scatter compared to the 
uncorrected set and was used in the design of the filter gain matrices. This 
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decision was influenced by the idea that the corrected models might have 
eigenvalues which would have less scatter if plotted against similar corrected 
bias parameters. This would make it possible to determine the models with 
eigenvalues which are close to each other and to group such models together. A 
computer program was written to compute eigenvalues of the corrected and 
uncorrected matrices. A visual check of the eigenvalues of the corrected and 
uncorrected set of matrices was made and the above was found to be true. It 
was observed that there were groups of models for which the eigenvalues were 
quite similar. Seven such groups of models were identified and are shown in 
Table 5-4. 

There were seven linear models which did not fall in any of the seven 
groups because their eigenvalues were large compared to the range of 
eigenvalues of the models in the seven groups. These are model numbers 66, 67, 
72, 73, 76, 85 and 96 (Table 5-4). These models were ignored in the filter 
gain design. However, transient operation of the filter was checked at some of 
these flight conditions to verify filter stability. 

A representative model was chosen in each group to be used for design of 
the filter gain matrix for that group. These models are shown circled in Table 
5-4. The filter gain designed for the representative model was used to check 
the closed loop eigenvalues of other models in the same group. The open loop 
eigenvalues are the eigenvalues of F matrix and closed loop are eigenvalues of 
(F + K H) matrix. These models in each group for which the closed loop 
eigenvalues were checked are underlined in Table 5-4. Results of the filter 
gain design and validation for group 2 are shown in Table 5-5. 
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TABLE 5-3 

FLIGHT POINTS FOR LINEAR MODEL DATA 


Altitude (Ft) 

Mach No. 

PLA (Deg.) 


0 

0 


24., 36., 

52. , 67. , 83. 

0 

1.2 


60., 70., 

83. 

10000 

0.3 


20. , 56. , 

83. 

10000 

0.75 


20. , 36 . , 

52., 67., 83. 

15000 

1.25 

60., [74. 

. 83.] 

15000 

1.6 


74., 83. 


20000 

0.75 


20. , 36. , 

52.. 67., 83. 

20000 

1.5 


[74., 83.] 

20000 

1.9 


[74., 83.] 

25000 

1.75 


[74.. 83.] 

28000 

1.25 

60., 74., 

83. 

30000 

0.6 


24.. 36.. 

67 . . 83 . 

30000 

2.0 


[74., 83.] 

32000 

2.2 


[74., 83.] 

35000 

0.8 

20. , 36. , 

52 . , 67. , 83 . 

35000 

1.6 


[74.. 83.1 

35000 

2.2 

[74.. 83.1 

35000 

2.5 


[74.. 83.] 

41000 

2.2 

74.. 83. 


41000 

2.3 


74., 83.] 

42500 

1.8 


74., 83.] 

42500 

2.2 


[74., 83.] 

45000 

0.9 

1 

24., 40., 

52 . , 67. , 83 . 

45000 

2.5 


[74., 83.] 

1 

49000 

2.3 


[74., 83.] 


50000 

1.3 


[74., 83.] 


50000 

1.8 


[74., 83.] 


50000 

2.3 


[74.. 83.] 


52500 

0.65 

20. , 36. , 

52. , 67. , 83 . 

55000 

2.1 

[74., 83.] 

56000 

2.0 

[74., 83.] 

59000 

2.3 

[74.. 83.] 

65000 

1.2 

60.. [74., 

, 83.] 

65000 

1.8 

[74.. 83.] 

65000 

2.5 

74., 83. 


70000 

0.85 


[20., 36.. 

, 52. , 67. , 83 , 

70000 

2.1 


74,. 83. J 

1 

75000 

1.2 


[60.. 74., 

, 83.) 

75000 

2.3 

74., 83. 


75000 

2.5 

[74., 83.] 
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Grouping of Linear Models With Similar Eigensystem 


Group 

Model Numbers* 

1 

1, 2, 3, 6, 7, 8, J2 

2 

29, 31, 40, 42, 51, 53, 55, 56, 57, 61, 
68, 70, 76, 83, 87, ^ 

3 

9, 13, 14, 17, 18, 20, 22, ^ 

4 

4, 10, 15, 19, 24, 25, 33, 34, 36, 37, 44, 45, 46, 
49, 50, 201, 106, 108 

5 

5, 11, 16, 26, 35, 92 

6 

38, 39, 47, 48, 63, 64, ^ 

7 

78, 79, 80, 81, 82, ^ 


* Model numbers correspond to the linear models in Table 5-3. For example, 
Model no. 1 is the linear model at 0 feet altitude, 0 Mach number, and 24 
degrees PLA. 
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TABLE 5-5 

Design and Validation Results of the Gain Matrix for Model No. 29 (Group 2) 


Model Open loop 

No. Eigenvalues 

1 

1 

1 Gain Matrix 

1 


1 

IClosed loop 
1 Eigenvalues 
1 

29 -2.46+j0.53 

(design) -2.46-j0.53 
point) -1.17 
-0.41 

-7.0318 1.2727 

0.2545 -6.1115 
0.0012 -0.0190 
-0.0165 -0.0489 

-3.8909 

-0.4551 

-0.0012 

-0.0142 

-0.6267 

0.0234 

0.0001 

-0.0015 

0.5500 -10.14 
0.0127 - 8.05 
0.0000 - 1.17 
0.0016 - 0.40 


42 

-2.39 

-7.0318. .1.2727 

-3.8909 

-0.6267 

0.5500 

-10.15 


-2.20 

0.2545 -6.1115 

-0.4551 

0.0234 

0.0127 

- 7.70 


-1.23 

0.0012 -0.0190 

-0.0012 

0.0001 

0.0000 

- 1.24 


-0.44 

-0.0165 -0.0489 

-0.0142 

-0.0015 

0.0016 

- 0.43 

56 

-2.79+J0.39 

-7.0318 

1.2727 

-3.8909 

-0.6267 

0.5500 

-10.61 


-2.79-jo. 39 

0.2545 -6.1115 

-0.4551 

0.0234 

0.0127 

- 8.18 


-1.82 

0.0012 -0.0190 

-0.0012 

0.0001 

0.0000 

- 1.83 


-0.59 

-0.0165 -0.0489 

-0.0142 

-0.0015 

0.0016 

- 0.62 

94 

-2.68+jo.35 

-7.0318 

1.2727 

-3.8909 

-0.6267 

0.5500 

- 9.96 


-2. 68-jo. 35 

0.2545 -6.1115 

-0.4551 

0.0234 

0.0127 

- 7.27 


-1.12+jo.04 

0.0012 -0.0190 

-0.0012 

0.0001 

O.UOGO 

- 2.C9 


-1.12-jo. 04 

-0.0165 -0.0489 

-0.0142 

-0.0015 

0.0016 

- 0.91 


5.4. 1.1 Sensitivity Analysis 

A sensitivity analysis of the eigenvalues of the closed loop system to 
the filter gain matrix elements was conducted using an SCT in-house computer 
program. The seven gain matrices designed for each group (Table 5-4) were used 
for this analysis. The elements of the gain matrix which show negligible 
effect on eigenvalues are: K33, K43, K34, K44, K35 and K45. They also show 

negligible change in the dc gains. These elements were set to zero in the K 
matrices for all the groups and the closed loop eigenvalues were checked. They 
showed no significant change as shown in Tables 5-6a and 5-6b for model 1 
(group 1) and model 39 (group 6), respectively. 
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TABLE 5-6a 
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EIGENVALUE SENSITIVITY TO GAIN MATRIX ELENENTS FOR MODEL 1 

(Group 1) 




Gain Matrix 



Closed loop Eigenvalues 

-5.3550 

-2.9653 

-2.7026 

-0.5184 

0.3321 

-8.5011 

-0.8896 

-3.4383 

-1.1883 

-0 .0858 

0.1634 

-4.9807 

-0.0269 

-0.0417 

-0.0203 

-0.0026 

0.0028 

-1.9299 

-0.0073 

-0.0204 

-0 .0078 

-0 .0007 

0.0012 

-0.6985 

-5.3550 

-2.9653 

-2.7026 

-0.5184 

0.3321 

-8.5011 

-0.8896 

-3.4383 

-1.1883 

-0 .0858 

0.1634 

-4.9820 

-0.0269 

-0.0417 

0.0000 

0.0000 

0.0000 

-1.9299 

-0.0073 

-0.0204 

0.0000 

0.0000 

0.0000 

-0.6965 



EIGE NVALUE 

SENSITIVITY 

TABLE 5-6 b 

TO GAIN MATRIX ELENENTS FOR MODEL 39 
(Group 6) 



Gain Matrix 



Closed loop Eigenvalues 

-17.0563 

-4.4392 

-1.5790 

-0.9692 

-1.2022 

-25.3128 

-7.7686 

-17.7455 

-8 .6375 

-0 .4601 

4.2235 

-20.8330 

-0.0335 

0.0121 

0.0082 

-0.0013 

-0.0062 

-4.7546 

0.0097 

0.0454 

0.0236 

0.0015 

-0.0093 

-1.5875 

-17.0563 

-4.4392 

-1.5790 

-0.9692 

-1.2022 

-25.3117 

-7.7686 

-17.7455 

-8.6375 

-0.4601 

4.2235 

-20.8344 

-0.0335 

0.0121 

0.0000 

0.0000 

0.0000 

-4.7535 

-0.0097 

0.0454 

0.0000 

0.0000 

0.0000 

-1.5894 


5.4.2 Curve Fitting of the Gain Matrices 

A regression analysis program was used to generate polynomial curve fits 
of the gain matrix elements. The seven filter gain matrices designed for each 
of the seven groups were used to generate polynomial models. Curve fits were 
not generated for the elements of the gain matrix which were found to have 
negligible effect on the eigensystem and the dc gains of the closed loop 
system. These elements were set equal to the mean value of the corresponding 
elements in the seven gain matrices. Table 5-7 shows the resulting polynomial 
fit. 
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TABLE 5-7 

SCHEDULE OF NORMALIZED K MATRIX 

K(1.1)=0 1 199E+2*D10RTl-0 2347*XPT6-0. 2577E+l*DLl**2-9. 309 
K<2. l)=-0 7734*RTlQDl-0 38A9E+1*TH1 I**2+2. 513 
K(3. i)=-0 1406E-1 

K(4, 1)= 0 1676E-l«-DLlI-0. 1379E-2*DLlI**2-0 2418E-1 
K(1.2)= 4919E+l*THl+ 1 1 98E-l*DlGRTl-8 672 

K(2. 2)=- 4401E+1*DL1 1- 2263E-1*XPT4+. 41B3*DL1 1«-«-2+ 88S1E-1 
K(3, 2)= 7774E-2-M-RT10D1- 4108E+3/XN1+ 2716E-1 

K(4,2>= 1729E-Ii«-RT1QD1- 1 1 59E+1 /XPT6+ 1061E-1 

K( 1. 3)=-2 t>17 

K(2, 3)=- 8336*-RT10Dl- 17*XPT6+2 810 
K(3. 3)=- 1587E-2 
K(4,3)= 2585E-2 

K(l. 4>=- 9646 

K(2. 4)=- 2344*DL1I- 1419E-l*XPT<b+ 2697E- 1 *DL 1 1**2+ 3979 
K(3, 4)=- 1440E-2 
K(4, 4)= 2246E-3 

K(l,5>=- 2596E+1*TH1+ 1009E-2*XN1-. 2499E-1*XPT4+ 4191 
K(2. 5)=- 1364*DL1 1**2+ 1397E+1*DL1 I*TH1 1-. 1699 
K(3, 5)=-. 1031E-2 
K(4, 5)=- 2983E-2 

5.4.3 Error Analysis 

The error analysis of the fit of the elements of K matrix includes 
plotting the computed values from the schedule against the actual value of 
each element. Representative plots are shown in Figures 5-21 a through 5-21d 
for the Kll, K21, K12, K22 matrix elements with a 45 degree line and 1 and 2 
bands (see section 3.5). Table 5-8 presents a tabulation of the statistical 
quantities R^, R, o-y, and o^y/x. 

5.4.4 Validation Transients For The Combined Filter/Model 

To evaluate the effectiveness of the filter gains in estimating sensor 
outputs, several transient runs were made with the model/filter out of the 
control loop (running "piggyback") and the filter gains are zero. The model 
responses were compared to the nonlinear engine simulation and with the model 
responses when the filter gains are not zero. Figures 5-22 through 5-24 show 
the model responses at three different flight conditions, where the model is 
running "piggyback" and the filter gains are zero. Figures 5-25 to 5-27 show 
the transients, where the model is running "piggyback" but the filter gains 
are not zero. The flight conditions for Figures 5-25 to 5-27 are the same as 
Figures 5-22 to 5-24, respectively. Although the model tracks the simulation 
closely with the gain set equal to zero, it can be seen that the errors are 
further reduced with the non-zero gains. 
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TABLE 5-8 

ERROR ANALYSIS OF K MATRIX ELENENTS 


c r ' '■ 

uOi'. V*- ~ 


1‘3 

- j 


Matrix 

Element 

r2 

R 

Mean 

ay 

<^y/x 

ay/x 

ay 

Kll 

0.704 

0.839 

- 9.251 

4.865 

2.794 

0.574 

K21 

0.8313 

0.912 

- 2.468 

2.935 

0.919 

0.313 

K31 

0 

0 

- 0.141E-1 

0.147E-1 

0.148E-1 

1.009 

K41 

0.8072 

0.898 

- 0.169E-2 

0.162E-1 

0.71 lE-2 

0.439 

K12 

0.8122 

0.901 

- 1.839 

2.261 

0.979 

0.433 

K22 

0.8156 

0.903 

-10.41 

4.874 

2.093 

0.429 

K32 

0.855 

0.925 

- 0.779E-2 

0.251E-1 

0.956E-2 

0.381 

K42 

0.874 

0.935 

- 0.223E-2 

0.458E-1 

0.163E-1 

0.355 

K13 

0 

0 

- 2.617 

1.36 

1.373 

1.009 

K23 

0.824 

0.905 

- 3.596 

3.14 

1.317 

0.419 

K33 

0 

0 

- 0.159E-2 

O.lllE-1 

112E-1 

1.009 

K43 

0 

0 

0.259E-2 

0.186E-1 

0.188E-1 

1.009 

K14 

0 

0 

- 0.965 

0.659 

0.665 

1.009 

K24 

0.801 

0.895 

- 0.347 

0.239 

0.107 

0.466 

K34 

0 

0 

- 0.144E-2 

0.191E-2 

0.193E-2 

1.009 

K44 

0 

0 

- 0.225E-3 

0.159E-2 

0.161E-2 

1.009 

K15 - 

0.712 

0.844 

0.484 

0.849 

0.481 

0.567 

K25 

0.725 

0.852 

1.689 

1.839 

1.018 

0.554 

K35 

0 

0 

- 0.1031E-2 

0.486E-2 

0.491E-2 

1.009 

K45 

0 

0 

- 0.298E-2 

0.839E-2 

0.847E-2 

1.009 
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Figure 5-22 


Transient Responses of the New Model Running "Piggyback" With 
Zero Filter Gains, for PLA Step from 20.0 Degrees to 83 0 

Degrees at Altitude = 0 ft and Mach No. = 0. Engine (— 1 

Model Output ( ), Reference ( ^ ^ ’’ 
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Figure 5-23 


Transient Responses of the 
Zero Filter Gains, for PL A 
Degrees at Altitude = 0 ft 
Model Output ( ), 


New Model Running "Piggyback" With 
Step from 70.0 Degrees to 83.0 

and Mach No. = 1.2. Engine (- ), 

Reference ( -) 
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Figure 5-25 Transient Responses of the New Model Running "Piggyback" With 
Nonzero Filter Gains, for PLA Step from 20.0 Degrees to 83 0 

Degrees at Altitude = 0 ft and Mach No. = 0. Engine ( ^ 

Model Output ( ^), Reference ( ) 
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Figure 5-26 Transient Responses of the New Model Running "Piggyback" With 
Nonzero Filter Gains, for PLA Step from 70.0 Degrees to 83.0 

Degrees at Altitude = 0 ft and Mach No. = 1.2. Engine ( ), 

Model Output ( ^), Reference ( ) 
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Figure 5-27 Transient Responses of the New Model Running "Piggyback" With 
Nonzero Filter Gains, for PLA Step from 20.0 Degrees to 83.0 
Degrees at Altitude = 20000 ft and Mach No. = 0.75. Engine 
^ ). Model Output ( Reference ( ) 
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5.5 MICROPRXESSOR REQUIRENENTS FOR THE DIA ALGORITHM 


Microprocessor implementation requirements in terms of the cycle time and 
memory space occupied by the DIA algorithm were determined for implementation 
of the algorithm on an INTEL 8086 microprocessor. The goal was to meet the 
requirements of 15 msec cycle time and 8000 sixteen bit words (or 16k bytes) 
of memory space. 

The approach taken to determine the microprocessor requirements was to 
obtain data for implementation of the algorithm on a VAX 11/780 at SCT's 
Resource Center. This data included memory usage and the cycle time. As part 
of the FlOO Multivariable program, the control algorithm was programmed on an 
INTEL 8086 microprocessor by NASA LeRC. Therefore, the cycle time and memory 
space data was available for the control algorithm. Microprocessor 
implementation requirements for the DIA algorithm were estimated using data 
from both sources. 

The following runs were made on the VAX system: 

( i) FlOO engine only 

(ii) FlOO engine + MVCS logic 

(iii) FlOO engine + MVCS logic + DIA logic 

From (i) and (ii) the execution time for the MVC logic can be determined 
for the VAX system. From (ii) and (iii) the time taken by the DIA algorithm 
can be determined. The execution times are presented in Table 5-9. A 
comparison of the execution times indicate that the execution time requirement 
for the DIA algorithm may exceed the goal of 15 msec. 

TABLE 5-9 

CYCLE TIMES FOR THE MVC AND DIA ALGORITHMS 
MVCS Logic DIA Logic 

VAX 11/780 41 msec 46 msec 

INTEL 8086 17 msec 19 msec 

The multivariable control and DIA related routines were separately compiled on 
the VAX system to determine their memory usage. A comparison is presented in 
Table 5-10 which shows that the memory usage for the DIA algorithm should meet 
the goal. 

TABLE 5-10 

MEMORY USAGE FOR THE MVC AND DIA ALGORITHMS 
MVCS Logic DIA Logic 

19k bytes 16k bytes 

13k bytes Ilk bytes 


VAX 11/780 
INTEL 8086 
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SECTION 6 


DETAILED EVALUATION OF THE SELECTED DIA ALGORITHM REVISION 

A detailed evaluation of the revised detection, isolation and accommodation 
(DIA) algorithm was conducted by simulating various sensor failure scenarios 
at 15 flight operating points, using the nonlinear FlOO engine and 
Multivariable Control (WC) simulation. Where applicable failure scenarios 
existed from the referenced contract (NAS3-22481) , comparisons were made to 
show the benefits of the algorithm revisions. The following paragraphs present 
the results of the evaluation. 

6.1 Evaluation Approach 

The approach used in developing the evaluation test plan was to demonstrate 
that the selected revision to the DIA algorithm addressed the shortfalls which 
were identified in the referenced contract. 

As a first step, the fifteen flight operating points from the referenced 
contract were modified to arrive at an improved set of test conditions to 
conduct the evaluation. The flight operating points were modified to better 
span the flight envelope and to demonstrate modeling accuracy while still 
maintaining sufficient common flight operating conditions to enable a 
comparison with the evaluation completed under the referenced contract. 

Figure 6-1 shows a flight envelope which indicates both the flight conditions 
at which the linear models were generated (see Section 3.1) and the flight 
operating points from the referenced contract. As shown, the flight operating 
points which were selected under the referenced contract do not completely 
span the envelope. Also, many points fall on or near a linear model point and 
therefore do not demonstrate the accuracy of the functional relationships 
which were developed for full flight envelope use. 

Figure 6-2 shows the same flight envelope with the flight operating points as 
selected for this contract for the detailed evaluation. These conditions were 
selected to better span the outskirts of the flight envelope and also to be 
sufficiently far away from the linear models such that the accuracy of the 
simplified nonlinear model could be evaluated. In the selection of these 
flight operating points, it was noted that the reference point schedules in 
the multi-variable control are valid to an altitude of 65000 feet. Therefore, 
this was a limiting factor in the selection of the flight operating points. 

6.2 Evaluation Results 
6.2.1 Steady State Comparison 

Steady State failure effects were evaluated at the fifteen flight operating 
points selected for this evaluation. The failures were induced by applying a 
constant bias to the sensor to be failed. The magnitude of the biases applied 
to the sensor values were: 
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Figure 6-2 


FlOO Flight Envelope Illustrating Selected Test Points Relative 
to Linear Model Points 
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Fan Speed (Nl) - 2000 RPM 
Compressor Speed (N2) - 2000 RPM 
Augmentor Total Pressure (PT6) - 35 psi 
Burner Pressure (PT4) - 100 psi 
Fan Turbine Inlet Temperature (FTIT) - 500°F 

Since the purpose of this test was to observe the accommodation accuracy of 
the algorithms, the biases were set arbitrarily large to ensure failure 
detection. After the failure was detected, isolated, and accommodated and the 
failure transient decayed, the estimation error in the affected sensor was 
recorded as well as changes in thrust, and fan and compressor surge margins. 
The estimation errors were calculated by taking the difference between the 
actual parameter and the estimator outputs. Where similar test cases existed 
from the referenced contract, comparisons were made with the appropriate data 
for both the DIA algorithm and parameter synthesis algorithm from the previous 
contract. 

Table 6-1 presents the results of this evaluation. As seen in this table, the 
revised DIA algorithm has comparable estimation errors to the baseline DIA 
algorithm from the referenced contract. This was anticipated since the steady 
state schedules within the filter's engine model were not modified as part of 
this program. In general, the percent change in thrust, from the correct 
steady state level, with the revised algorithm is significantly less than that 
with the baseline algorithm since the revised algorithm eliminates the effect 
of filter biases. 

The previous contract showed that neither the DIA algorithm nor the parameter 
synthesis technique provided adequate FTIT protection when operating on the 
synthesized or estimated value. Both of the FTIT failure cases examined with 
the revised algorithm showed adequate FTIT protection for hard over failure. 
The DIA performance of the FTIT estimator will be discussed further in 
subsequent sections. 

6.2.2 Typical Failure Transients 

When the steady state failures were induced, the resulting engine perturbation 
transients were observed. Figure 6-3 shows a comparison of failure transients 
between Parameter Synthesis, the baseline Advanced DIA algorithm and the 
revised DIA algorithm for an N2 out-of-range failure induced at time=3.0 
seconds. It can be seen that when the failure is induced, the revised DIA 
algorithm follows the N2 sensor (failed high) until the failure is detected 
and isolated. The N2 sensor is then replaced with the estimated N2 resulting 
in the failure transient shown. 

The resulting thrust comparisons show the revised DIA algorithm and the 
Parameter synthesis technique both at the desired thrust level prior to the 
failure. Since the baseline DIA algorithm feeds back estimates to the 
multivariable control in the case of no failures, the estimator biases result 
in a steady state hangoff. A 468 pound thrust error is shown prior to the 
failure. When the failure is induced, the Parameter Synthesis shows a larger 
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thrust perturbation than the baseline and revised DIA algorithms. This is to 
be expected since the Parameter Synthesis algorithm switches from the failed 
sensor value to the estimate when the failure is detected and isolated, 
whereas the baseline and revised algorithms reconfigure the filter to 
eliminate the failed sensor from the estimator calculations. (In the revised 
DIA algorithm, the estimated N2 is always fed back to the LQR portion of the 
control mode.) The revised algorithm exhibits a similar magnitude thrust 
transient as the baseline algorithm but will settle to a lower magnitude 
steady state error since the actual values of N1 and PT6 are being fed back to 
the integral portion of the control mode. 

Figure 6-4 shows a comparison of N1 sensor failure transients between the 
baseline DIA algorithm and the revised DIA algorithm. The baseline DIA 
algorithm shows steady state N1 hangoff error prior to the failure between the 
actual N1 and the schedule value whereas this error is eliminated with the 
revised algorithm, since the actual values of N1 and PT6 are fed back to the 
integral portion of the control mode. After the N1 sensor failure is detected, 
isolated and accommodated, both the baseline and revised algorithms feed 
estimated N1 to the integral mode and, therefore, exhibit similar hangoff 
errors. 

6.2.3 Detection/Isolation Accuracy 

To evaluate the detection and isolation performance of the revised DIA 
algorithm, slow sensor drifts were simulated at the fifteen flight operating 
points. When the failure was detected and isolated, the magnitudes of the 
biases and thrust variation were recorded as tabulated in Table 6-2. For the 
most part, the detection accuracy was shown to be generally equal betv/een the 
baseline DIA algorithm and the revised DIA algorithm. 
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Figures 6-5 and 6-6 show time histories of pertinent engine performance 
parameters responding to a PT4 drift failure with the baseline and revised DIA 
algorithms, respectively. A comparison of the two results shows that the 
revised DIA algorithm performed similar to the baseline algorithm, and in most 
cases the accoimodation transient was of a smaller magnitude. The results with 
the revised algorithm did, however, exhibit an apparent oscillatory mode on 
fuel flow as can be seen from the PT4 and compressor surge margin (SWC) 
plots. The cause of this stability problem was not determined, but may result 
from an interaction between the filter with the revised gain matrix and the 
multivariable control mode. It is not felt to be a result of the algorithm 
revision (for eliminating hang-off errors). This problem should be evaluated 
in more detail during NASA's hybrid simulation evaluation. 

Figures 6-7 and 6-8 show time histories of pertinent engine performance 
parameters responding to a negative N2 drift failure with the baseline DIA 
algorithm and the revised DIA algorithm, respectively. Both versions of the 
DIA algorithm failed to detect the failure for a 2000 RPM drift. This is due 
to the fact that the design of the Kalman filter gains results in a high 
weighting being placed on the Nl and N2 sensors, since they are predominant 
states in the simplified nonlinear engine model. Thus, the estimator tracks 
the failed sensors and the residuals do not increase sufficiently to indicate 
a failure. In the revised algorithm design, a conscious effort was made to 
more evenly distribute the weighting of the gain matrix among the input 
parameters, however, the weighting on the rotor speed still remained large 
relative to the other parameters. An evaluation of further adjustments to 
filter gain matrix elements during NASA's hybrid simulation evaluation would 
be beneficial. 

Figures 6-9 and 6-10 show time histories of pertinent engine performance 
parameters responding to a positive N2 drift with the baseline DIA algorithm 
and the revised DIA algoritnm, respectively. As with the above negative N2 
drift case, the positive drift results in the estimate following the failed 
sensor value. However, with this failure scenario, the failure was detected, 
isolated, and accommodated by both versions of the DIA algorithm after a 1400 
RPM drift. In both cases, the failure transients were similar. Transients in 
the estimator outputs are generally larger for the revised algorithm, since 
its estimator appears to be tracking the failed N2 sensor closer than the 
estimator for the baseline algorithm. 

This study showed that the baseline DIA algorithm and the revised DIA 
algorithm respond similarly to slow drift failures. Even though the revised 
DIA algorithm Kalman filter gains were designed to more evenly distribute the 
weighting for the input parameters, the rotor speeds still remained dominant 
relative to the other inputs. As a result, the DIA algorithms were not 
effective in isolating Nl and N2 drifts. It is therefore concluded that either 
the filter gains should be adjusted to reduce the weighting on parameters 
which are the dominant states of the engine model within the DIA algorithm or 
other means should be provided for in-range drift failure coverage. 
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Transient Results with the Baseline DIA Algorithm for a PT4 
Sensor Drift (15 psi/sec) Sea Level Static 83° PLA 
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Transient Results v/ith the Revised DIA Algorithm for a PT4 
Sensor Drift (15 psi/sec) Sea Level Static 83° PLA 
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Figure 6-7 Transient Results with the Baseline DIA Algorithm for an N2 
Sensor Drift (-400 rpm/sec) 20K/0.3 Mn, 83° PLA 
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Figure 6-9 Transient Results with the Baseline DIA Algorithm for an 
Sensor Drift (+400 rpm/sec) 20K/0.3 Mn, 83° PLA 




6.2.4 Transient Failure Comparisons 

Sensor failures were induced during large perturbation transients to compare 
transient detection and isolation capability as well as observe the engine's 
transient behavior when operating with the accommodation of a failed sensor. 
Figure 6-11 shows the resulting transient response to a large perturbation 
acceleration transient when operating on a failed PT4 sensor at sea level 
static for the baseline DIA algorithm and the revised DIA algorithm. Both 
versions of the DIA algorithm performed well. 

Figure 6-12 shows the resulting transient response to a large perturbation 
deceleration transient when operating on a failed N2 signal at 20000 feet/0.3 
Mn. The transient responses of the two versions of the algorithm are shown to 
have comparable trends. The "hangup" evident in the transient for the revised 
DIA algorithm is the result of the trim integrator clamping logic in the 
multivariable control mode. 

6.2.5 Multiple Sensor Failures 

Multiple sensor failures, consisting of PT4 and N2 sensor failures, were 
simulated at sea level static conditions to compare the two versions of the 
DIA algorithms capability to detect, isolate, and accommodate a second sensor 
failure. For this case, both the revised and baseline algorithms detected, 
isolated and accommodated both failures and demonstrated similar transient 
performance, as indicated by the thrust transients shown on Figure 6-13. This 
figure compares the thrust variations relative to the perfect sensor feedback 
case. As shown on this figure, the thrust for the revised algorithm case is 
slowly being trimmed down to a level within 40 pounds of its initial thrust 
level, whereas the baseline algorithm suffers a performance degradation of 57 
pounds with the second failure. 

Multiple sensor failure transient response was also evaluated for the two 
revisions of the DIA algorithm by simulating an N1/PT6 failure combination at 
sea level static 20° PLA conditions, followed by a snap PLA perturbation from 
20° to 83°. These results are shown on Figures 6-14 and 6-15. The revised 
algorithm showed better transient response which results from improving the 
simplified nonlinear simulation within the DIA algorithms filter. 
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Failure Transient Comparisons for a PT4 Sensor Failure at Sea 
Level Static and 83° PLA 
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SECTION 7 


CONCLUSIONS 

7.1 A comparative evaluation of the three potential revisions, to the sensor 
failure detection, isolation and accommodation (DIA) algorithm, for 
eliminating the effect of filter biases on the steady state operating point 
resulted in the following conclusions. 

7.1.1 All three revisions are effective in eliminating the errors in the 
steady state operating points caused by biases on filter outputs, without 
affecting the DIA algorithm's capability to detect, isolate and accommodate 
sensor failures. 

7.1.2 Revisions 1 and 2 are far less complex than Revision 3 which utilized 
supplementary trim integrators in the estimator and requires special 
manipulation of the detection threshold. 

7.1.3 The Revision 3 version of the DIA algorithm results in slower 
convergence to steady state conditions due to the additional dynamic lag 
associated with the supplementary trim integrators in the estimator. 

7.1.4 Revision 2 represents the best compromise in terms of complexity and 
performance for the three revisions evaluated, and was therefore selected tor 
detailed evaluation on the nonlinear FIDO engine/multivariable control (HVC) 
simulation. 

7.2 A comparison of the revision 2 DIA algorithm with the baseline DIA 
algorithm on the detailed nonlinear FIOO/MVC simulation resulted in the 
following conclusions. 

7.2.1 The revised DIA algorithm has similar magnitude estimation errors 
compared to the baseline algorithm since the simplified nonlinear engine model 
steady state basepoints were not updated. However, by feeding back the actual 
values of low rotor speed (Nl) and exhaust nozzle pressure (PT6) to the 
control integrators when there are no sensor failures, the effect of the 
estimation errors is eliminated. Improving the accuracy of the engine model 
steady state basepoints would reduce estimation errors, but these errors were 
retained in this program to allow an effective evaluation of the DIA algorithm 
revisions. 

7.2.2 In general, detection, isolation and accommodation performance of the 
revised DIA algorithm was comparable to that of the baseline DIA algorithm. 
Improvements were obtained in the detection of hard failures of Fan Turbine 
Inlet Temperature (FTIT), due to improvements in the simplified engine model. 
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7.2.3 Both the revised and baseline DIA algorithms exhibited difficulties in 
detecting drifts in low and high rotor speeds (N1 and N2). Sizing of Kalman 
filter gain matrices results in a high weightings being placed on N1 and N2 
speeds, even though a conscious effort was made for the revised DIA algorithm 
to reduce dependency on these dominant engine variables. As a result of this 
dependency, the filter tends to track these failed measurements and therefore 
makes it difficult to detect the failures. It is apparent that either further 
compromises must be made in sizing of the filter gain matrices, or alternative 
means to detect slow drift failures of these dominant parameters need to be 
incorporated in the DIA algorithm. 

7.3 Microprocessor implementation requirements for the revised DIA algorithm 
were estimated at 19 msec for cycle time and 1 IK bytes of memory for an INTEL 
8086 microprocessor. 

7.4 Development of an improved simplified nonlinear FIDO engine model for use 
in the DIA algorithm's filter resulted in the following conclusions. 

7.4.1 Selecting flight operating points, at which to calculate linear models 
from the nonlinear simulation, based upon a criterion of a good spread of 
points on both A1 titude/Hach Number and Total Pressure/Total Temperature 
envelopes, results in a good data base for developing good curve fits of model 
matrix elements. 

7.4.2 The revised simplified nonlinear engine model provides significant 
improvements in dynamic accuracy over the previous model when compared to the 
detailed nonlinear simulation. 
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SECTION 8 


RECOMMENDATIONS 

8.1 The revised sensor failure detection, isolation and accommodation (DIA) 
algorithm, developed under this program, should be implemented on NASA Lewis 
Research Center's microprocessor system and operated with their hybrid 
simulation of the FlOO engine to evaluate operation of the DIA algorithm in a 
real-time environment. As a part of this evaluation, it is recommended that 
the following areas be addressed to investigate problems identified in this 
program. 

8.1.1 Evaluate adjustments to filter gains to reduce dependency on low and 
high rotor speeds (Ml and N2) , such that detection of Ml and N2 drift failures 
will be improved. 

8.1.2 Evaluate potential interaction problem between the filter and the 
Multivariable Control (MVC) mode as evidenced by fuel flow oscillations during 
the burner pressure (PT4) drift failure case. 

8.1.3 Adjust simplified engine model steady state base points to be 
consistent with the FlOO hybrid engine simulations steady state 
characteristics. Evaluate improvements in DIA performance resulting from 
improved steady state accuracy and resulting reduced estimation errors. 

8.2 Subsequent to a hybrid simulation evaluation of the revised DIa algorithm 
inplemented on NASA's microprocessor system, it is recommended that NASA 
conduct an engine test of the microprocessor-based DIA algorithm. 
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APPENDIX A 

ADVANCED CONCEPT FOR DETECTING, ISOLATING, AND ACCOMMODATING 
SENSOR FAILURES IN GAS TURBINE CONTROL SYSTEMS 

This appendix presents a detailed description of the advancea concept, 
developed under NASA Contract NAS3-22481, for detecting, isolating, and 
accommodating sensor failures in gas turbine engine control systems. The 
discussion is divided into the separate tasks of detection, isolation, and 
accommodation. 

Detection 


The detection scheme uses a simple threshold comparison check on the normal 
mode filter residuals to declare a hard failure. The Weighted Sum Square 
Residual (WSSR) test is used for soft failure detection. This technique uses 
filter innovations for decision making. The innovation sequence 'y(k) is white 
with known covariance if the model is perfect and there is no failure. In case 
of a failure the residual becomes 


y (k) = white noise + effect of failure 


and the detector is used to identify the failure using a priori knowledge of 
white noise covariance and the new statistics. To detect a failure, one 
therefore has to compute the quantity l(k) over the last N observations, 


Kk) 

J 


v(j) V'^j) y (j) 

= k - N + 1 


where V(j) is given by: 

V(j) = H (j) P (j7j-l)HT(j) + R 

A 

where P(j) is the estimation error covariance of the state estimate X(j), H 
(j) is the plant output matrix, and R is the measurement noise covariance 
matrix. 

The quantity l(k) is called the Weighted Sum Square Residual. For normal 
(nonfailure) operation, l(k) is expected to remain small. However, in case of 
a failure, l(k) will increase. If x is the threshold value to make a decision 
between Hq and Hi, we have 

< \ impl ies Hn true 

Kk) 

> A impl ies H] true 

The size of N and X are design parameters, chosen to provide acceptable 
tradeoff between false alarms and misses. 
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Isolation 


Isolation of soft failures is performed "off-line"; i.e., after the failure is 
detected, using a likelihood ratio test. Since M failure modes are 
hypothesized, M Kalman filters (bank of filters) are designed based on each 
failure mode. Each of the filters ignores one measurement and operates on the 
assumption that the channel containing the failure information has been 
ignored. When a failure occurs, the filter which ignores the failed channel - 
stands out from all other filters and the likelihood ratio test is used to 
identify the failed channel filter. 

The design parameters involved in this isolation process are the thresholds 
used to perform the likelihood ratio test. The techniques in Table A-1 can be 
used to select the threshold. 


TABLE A-1 

THRESHOLD SELECTION 

Minimize Miss Probability for a Fixed False-Alarm Rate 
Minimize Sum of Miss and False-Alarm Probabilities 
Minimize the Bayes Risk 


B = Coo P(Ho.Ho) + Coi P(Hq,Hi) + C]o P(Hi,Ho) + Cn P(H],Hi) 


where 


p(Hi,Hj) = Phi p(Hj/ht) 



P(Hi/Hj)= 

Accommodation 


hypothesis associated with failure mode i 
cost of accepting Hj when Hj is true 
a-priori probability that Hj is true 
probability of accepting H-j given Hj is true 


The normal mode filter serves as the accommodation filter for the no-failure 
case. In case of a hard failure, where the failure is detected and isolated 
simultaneously, the accommodation filter is reconfigured to eliminate the 
faileo channel. One of the isolation filters which ignores the failed channel 
is used for this purpose. There may be small transients associated with 
switching filters. In case of soft failures, the normal mode filter provides 
estimates to the control logic while the failure is being isolated. After the 
isolation of the failure, the accommodation filter (the normal mode filter) is 
reinitialized and reconfigured using the "isolated" filter. 
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Once a failure has been detected and isolated, further tests for additional 
failures are performed on the accommodation filter. Each time a failure is 
isolated, the accommodation filter is reinitialized and reconfigured. 

A detailed flow chart of this concept is shown in Figure A-1. 



Figure A-1 Flow Chart of DIA Concept 
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ISOLATION 




HYPOTHESIS FORMULATION; 

1 

.X - F.X ♦ Gu - Kq Yq 

HO ^ 

^0 • ^ * =0 
^ tg - Hx ♦ Du 

H.- 

• 

f * 

- Fx Gu »• Kg Y^ 

Y m 1 • 2 . 

( 

'v Z; ■ Hx Du 

1 ■ 1 , 5 


Yrt(n), YiCn) 


PROBABILITY DENSITIES; r 
HO; p(Y(n)|H0) - 

/J7^ cJqJ. 20g- 

HI; pCYCn)|Hl) - — 1 


HO; p(Y(n)|H0) 




DECISION LOGIC; 


Hj True 

'^Cn) . 

|H,1 

> Ui 

PofYj^Cn) 

|HO] 

Hq True 



1 = 


Figure A-1 Flow Chart of DIA Concept (Continued) 
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Figure A-1 Flow Chart of DIA Concept (Concluded) 
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